bitbucket.org/Aishee/synsec@v0.0.0-20210414005726-236fc01a153d/synsec-/config/patterns/cowrie_honeypot

COWRIE_NEW_CO New connection: %{IPV4:source_ip}:[0-9]+ \(%{IPV4:dest_ip}:%{INT:dest_port}\) \[session: %{DATA:telnet_session}\]$