cowrie

Cowrie is a versatile SSH and Telnet honeypot that functions either as a medium to high interaction logging system or as a proxy to monitor attacker behavior on real systems. It features an emulated UNIX environment with a fake filesystem, supports session logging in a replayable format, and can utilize large language models to generate dynamic responses to attacker commands in experimental mode. Additionally, it facilitates file uploads and downloads, SSH exec commands, and logs connection attempts for further analysis.