http://ivyfc7cpzv3uw3g2s36satpxbbdn545mjuwxji2ltkb5s4aj2lqm4kyd.onion/blog/honeypot
Cowrie is intentionally setup to accept a variety of common username and passwords and upon a successful login will emulate a Debian 5.0 shell with a fake file system. Attackers can send commands to the shell, upload files with SFTP or SCP, or attempt SSH proxying.