ssh-honeypot
A low-interaction SSH honeypot that logs attacker IPs, usernames, and passwords for security intelligence.
What is ssh-honeypot?
SSH Honeypot is a fake SSH server that logs IP addresses, usernames, and passwords from incoming SSH connection attempts. It is designed as a low-interaction honeypot, meaning it does not allow attackers to log in, making it safe for gathering intelligence on brute-force attacks and profiling malicious activity.
Security researchers, penetration testers, and system administrators who want to monitor SSH-based attack patterns, gather threat intelligence, or simulate honeypot environments in CTF (Capture The Flag) competitions.
Developers choose SSH Honeypot for its simplicity, lightweight design, and advanced features like HASSH fingerprinting and JSON logging, which provide detailed attack insights without the risk of real system compromise.
Overview
Fake sshd that logs ip addresses, usernames, and passwords.
Use Cases
Best For
- Monitoring brute-force SSH attacks on exposed servers
- Gathering threat intelligence on attacker IPs and credentials
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
