telnetlogger
A Telnet honeypot that logs failed login attempts to track botnet activity like Mirai.
What is telnetlogger?
telnetlogger is a Telnet honeypot that simulates a Telnet server to log failed login attempts, capturing IP addresses and credentials used by attackers. It was created specifically to track the Mirai botnet and similar malware by providing the Telnet responses these bots expect. The tool outputs simple text files that can be analyzed to understand attack patterns and sources.
Security researchers, network administrators, and hobbyists monitoring botnet activity or studying Telnet-based attacks on their networks.
It's a lightweight, cross-platform alternative to full Telnet daemons that may not work with modern botnets, focusing purely on logging with minimal setup and dependencies.
Overview
Simulates enough of a Telnet connection in order to log failed login attempts.
Use Cases
Best For
- Tracking Mirai botnet infection attempts across the internet
- Monitoring Telnet port 23 for unauthorized login attempts
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
