192.53.121.87
- Sensor
- hp-use-01
- Source
- cowrie
- Status
- failed
- Event time
- Received
Triage failed — no verdict was produced.
Tool trace
No tool calls were made.
Raw session JSON
{
"events": [
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "192.53.121.87",
"eventid": "cowrie.session.connect",
"message": "New connection: 192.53.121.87:49704 (172.18.0.2:2222) [session: 62cea7b93c43]",
"outfile": null,
"session": "62cea7b93c43",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 49704,
"username": null,
"timestamp": "2026-10-20T03:55:05.498516Z",
"duration_ms": null
},
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "192.53.121.87",
"eventid": "cowrie.client.version",
"message": "Remote SSH version: SSH-2.0-OPENSSH_7.9",
"outfile": null,
"session": "62cea7b93c43",
"version": "SSH-2.0-OPENSSH_7.9",
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 49704,
"username": null,
"timestamp": "2026-10-20T03:55:05.521679Z",
"duration_ms": null
},
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"encCS": [
"chacha20-poly1305@openssh.com",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"aes128-gcm@openssh.com",
"aes256-gcm@openssh.com",
"aes128-cbc",
"aes192-cbc",
"aes256-cbc",
"blowfish-cbc",
"cast128-cbc",
"3des-cbc"
],
"hassh": "b21d7cdcc8133dc2b430d1a039fece20",
"input": null,
"macCS": [
"umac-64-etm@openssh.com",
"umac-128-etm@openssh.com",
"hmac-sha2-256-etm@openssh.com",
"hmac-sha2-512-etm@openssh.com",
"hmac-sha1-etm@openssh.com",
"umac-64@openssh.com",
"umac-128@openssh.com",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1"
],
"compCS": [
"none"
],
"dst_ip": "172.18.0.2",
"langCS": [
""
],
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "192.53.121.87",
"eventid": "cowrie.client.kex",
"kexAlgs": [
"diffie-hellman-group14-sha1",
"diffie-hellman-group1-sha1",
"diffie-hellman-group14-sha256",
"diffie-hellman-group16-sha512",
"diffie-hellman-group18-sha512",
"diffie-hellman-group-exchange-sha1",
"diffie-hellman-group-exchange-sha256"
],
"keyAlgs": [
"ssh-rsa",
"rsa-sha2-512",
"rsa-sha2-256"
],
"message": "SSH client hassh fingerprint: b21d7cdcc8133dc2b430d1a039fece20",
"outfile": null,
"session": "62cea7b93c43",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 49704,
"username": null,
"timestamp": "2026-10-20T03:55:05.569672Z",
"duration_ms": null,
"hasshAlgorithms": "diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none"
},
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"encCS": [
"chacha20-poly1305@openssh.com",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"aes128-gcm@openssh.com",
"aes256-gcm@openssh.com",
"aes128-cbc",
"aes192-cbc",
"aes256-cbc",
"blowfish-cbc",
"cast128-cbc",
"3des-cbc"
],
"hassh": "b21d7cdcc8133dc2b430d1a039fece20",
"input": null,
"macCS": [
"umac-64-etm@openssh.com",
"umac-128-etm@openssh.com",
"hmac-sha2-256-etm@openssh.com",
"hmac-sha2-512-etm@openssh.com",
"hmac-sha1-etm@openssh.com",
"umac-64@openssh.com",
"umac-128@openssh.com",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1"
],
"compCS": [
"none"
],
"dst_ip": "172.18.0.2",
"langCS": [
""
],
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "192.53.121.87",
"eventid": "cowrie.client.kex",
"kexAlgs": [
"diffie-hellman-group14-sha1",
"diffie-hellman-group1-sha1",
"diffie-hellman-group14-sha256",
"diffie-hellman-group16-sha512",
"diffie-hellman-group18-sha512",
"diffie-hellman-group-exchange-sha1",
"diffie-hellman-group-exchange-sha256"
],
"keyAlgs": [
"ssh-rsa",
"rsa-sha2-512",
"rsa-sha2-256"
],
"message": "SSH client hassh fingerprint: b21d7cdcc8133dc2b430d1a039fece20",
"outfile": null,
"session": "62cea7b93c43",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 49704,
"username": null,
"timestamp": "2026-10-20T03:55:05.606130Z",
"duration_ms": null,
"hasshAlgorithms": "diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none"
},
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "192.53.121.87",
"eventid": "cowrie.session.closed",
"message": "Connection lost after 115 milliseconds",
"outfile": null,
"session": "62cea7b93c43",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 49704,
"username": null,
"timestamp": "2026-10-20T03:55:05.614073Z",
"duration_ms": 115
}
],
"sensor": "hp-use-01",
"source": "cowrie",
"src_ip": "192.53.121.87",
"session_id": "62cea7b93c43"
}