3.130.168.2
- Sensor
- hp-use-01
- Source
- cowrie
- Status
- failed
- Event time
- Received
Triage failed — no verdict was produced.
Tool trace
No tool calls were made.
Raw session JSON
{
"events": [
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "3.130.168.2",
"eventid": "cowrie.session.connect",
"message": "New connection: 3.130.168.2:40196 (172.18.0.2:2222) [session: 957cddbb7441]",
"outfile": null,
"session": "957cddbb7441",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 40196,
"username": null,
"timestamp": "2026-10-24T21:32:21.967330Z",
"duration_ms": null
},
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "3.130.168.2",
"eventid": "cowrie.client.version",
"message": "Remote SSH version: ",
"outfile": null,
"session": "957cddbb7441",
"version": "",
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 40196,
"username": null,
"timestamp": "2026-10-24T21:32:21.967670Z",
"duration_ms": null
},
{
"url": null,
"uuid": "28d6f35e-aed5-11f1-a29a-0242ac120002",
"input": null,
"dst_ip": "172.18.0.2",
"sensor": "hp-use-01",
"shasum": null,
"src_ip": "3.130.168.2",
"eventid": "cowrie.session.closed",
"message": "Connection lost after 1 milliseconds",
"outfile": null,
"session": "957cddbb7441",
"version": null,
"dst_port": 2222,
"password": null,
"protocol": "ssh",
"src_port": 40196,
"username": null,
"timestamp": "2026-10-24T21:32:21.968097Z",
"duration_ms": 1
}
],
"sensor": "hp-use-01",
"source": "cowrie",
"src_ip": "3.130.168.2",
"session_id": "957cddbb7441"
}