libssh

ssh-honeypotdroberson/ssh-honeypot

A low-interaction SSH honeypot that logs attacker IPs, usernames, and passwords for security intelligence.

HIBAgoogle/hiba

A flexible authorization layer for OpenSSH certificate-based authentication using host identities and grants.

potdlnslbrty/potd

A scalable SSH/TCP honeypot using Linux security features, designed for OpenWrt and IoT devices.

ssh-honeypotamv42/sshd-honeypot

A modified OpenSSH daemon that forwards attacker commands to Cowrie for logging and interaction interpretation.