🦖

Cowrie is a SSH and Telnet Honeypot that logs brute force attacks and shell interaction performed by attackers. Cowrie emulates a UNIX system in Python and acts as an SSH and Telnet proxy to capture the behavior of attackers on other systems. Cowrie thus imitates a virtual Linux device that accepts arbitrary usernames and passwords, giving attackers a variety of options, such as automated attacks. Files uploaded by attackers are automatically analyzed by AV-TEST and checked for malware.