{"eventid":"cowrie.session.connect","src_ip":"40.77.103.249","src_port":54472,"dst_ip":"1.2.3.4","dst_port":22,"session":"8fa476a85aea","protocol":"ssh","message":"New connection: 40.77.103.249:54472 (1.2.3.4:22) [session: 8fa476a85aea]","sensor":"my-vps","timestamp":"2025-09-11T08:02:17.747471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"my-vps","timestamp":"2025-09-11T08:02:21.774988Z","src_ip":"40.77.103.249","session":"8fa476a85aea"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"my-vps","timestamp":"2025-09-11T08:02:24.565796Z","src_ip":"40.77.103.249","session":"8fa476a85aea"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"my-vps","timestamp":"2025-09-11T08:02:25.651786Z","src_ip":"40.77.103.249","session":"8fa476a85aea"}
{"eventid":"cowrie.session.connect","src_ip":"111.180.193.211","src_port":53068,"dst_ip":"1.2.3.4","dst_port":22,"session":"d4da73518239","protocol":"ssh","message":"New connection: 111.180.193.211:53068 (1.2.3.4:22) [session: d4da73518239]","sensor":"my-vps","timestamp":"2025-09-11T08:04:14.189086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"my-vps","timestamp":"2025-09-11T08:04:46.224445Z","src_ip":"111.180.193.211","session":"d4da73518239"}
{"eventid":"cowrie.session.closed","duration":"25.4","message":"Connection lost after 25.4 seconds","sensor":"my-vps","timestamp":"2025-09-11T08:05:08.836218Z","src_ip":"111.180.193.211","session":"d4da73518239"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.37.34","src_port":46752,"dst_ip":"1.2.3.4","dst_port":22,"session":"ddcb74200085","protocol":"ssh","message":"New connection: 103.82.37.34:46752 (1.2.3.4:22) [session: ddcb74200085]","sensor":"my-vps","timestamp":"2025-09-11T08:05:09.186826Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.72.205.35","src_port":50268,"dst_ip":"1.2.3.4","dst_port":22,"session":"09a19a037bad","protocol":"ssh","message":"New connection: 217.72.205.35:50268 (1.2.3.4:22) [session: 09a19a037bad]","sensor":"my-vps","timestamp":"2025-09-11T08:05:09.247725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"my-vps","timestamp":"2025-09-11T08:05:09.250073Z","src_ip":"103.82.37.34","session":"ddcb74200085"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"my-vps","timestamp":"2025-09-11T08:05:09.257127Z","src_ip":"217.72.205.35","session":"09a19a037bad"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"my-vps","timestamp":"2025-09-11T08:05:09.257760Z","src_ip":"103.82.37.34","session":"ddcb74200085"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.95.116","src_port":44184,"dst_ip":"1.2.3.4","dst_port":22,"session":"eb7e8ed871ae","protocol":"ssh","message":"New connection: 80.94.95.116:44184 (1.2.3.4:22) [session: eb7e8ed871ae]","sensor":"my-vps","timestamp":"2025-09-11T08:09:35.081357Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.72.205.35","src_port":59070,"dst_ip":"1.2.3.4","dst_port":22,"session":"9b714e1add84","protocol":"ssh","message":"New connection: 217.72.205.35:59070 (1.2.3.4:22) [session: 9b714e1add84]","sensor":"my-vps","timestamp":"2025-09-11T08:11:41.999740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.10.5","message":"Remote SSH version: SSH-2.0-libssh_0.10.5","sensor":"my-vps","timestamp":"2025-09-11T08:11:42.001030Z","src_ip":"80.94.95.116","session":"eb7e8ed871ae"}
{"eventid":"cowrie.session.connect","src_ip":"112.154.159.27","src_port":58317,"dst_ip":"1.2.3.4","dst_port":23,"session":"423eca35ab3c","protocol":"telnet","message":"New connection: 112.154.159.27:58317 (1.2.3.4:23) [session: 423eca35ab3c]","sensor":"my-vps","timestamp":"2025-09-11T08:11:42.003357Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"my-vps","timestamp":"2025-09-11T08:11:42.004716Z","src_ip":"217.72.205.35","session":"9b714e1add84"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"my-vps","timestamp":"2025-09-11T08:11:42.005241Z","src_ip":"80.94.95.116","session":"eb7e8ed871ae"}
{"eventid":"cowrie.session.closed","duration":0.002467632293701172,"message":"Connection lost after 0 seconds","sensor":"my-vps","timestamp":"2025-09-11T08:11:42.005741Z","src_ip":"112.154.159.27","session":"423eca35ab3c"}