Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers, and brute force attempts for deception and monitoring. It uses Python-based protocol emulation within a Twisted event-driven network framework to handle concurrent connections, while maintaining an in-memory virtual filesystem that logs every read, write, and traversal operation. The honeypot distinguishes itself through LLM-driven dynamic response generation, producing context-aware shell replies that adapt to attacker commands rather than relying on static templates. A plugi
.. SPDX-FileCopyrightText: 2014 Upi Tamminen .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof .. .. SPDX-License-Identifier: BSD-3-Clause
Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
A low/zero interaction ssh authentication logging honeypot
The main features of justinazoff/ssh-auth-logger are: SSH Honeypots.
Open-source alternatives to justinazoff/ssh-auth-logger include: micheloosterhof/cowrie — Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers,… cowrie/cowrie — .. SPDX-FileCopyrightText: 2014 Upi Tamminen .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof .. ..… cryptix720/hudinx — Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the… czardoz/hornet — SSH Multipot. deroux/longitudinal-analysis-cowrie — Longitudinal Analysis of SSH Cowrie Honeypot Logs. ashmckenzie/go-sshoney — SSH Honeypot.
