sshhipot
A high-interaction SSH honeypot that logs and proxies attacker connections to a real SSH server.
What is sshhipot?
SSHHiPot is a high-interaction SSH honeypot that acts as a logging proxy between attackers and a real SSH server. It captures and logs malicious SSH activity while forwarding connections to the actual server, allowing security teams to analyze attack patterns without disrupting service.
Security researchers, system administrators, and cybersecurity professionals who need to monitor and analyze SSH-based attacks on their servers.
It provides a lightweight, self-hosted solution for SSH attack logging with minimal configuration, offering detailed connection logs and flexible authentication options compared to more complex security monitoring tools.
Overview
High-interaction MitM SSH honeypot
Use Cases
Best For
- Monitoring SSH brute-force attacks on exposed servers
- Capturing attacker commands and behavior in SSH sessions
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
