Ssh Honeypot

sshesameGo

A lightweight SSH honeypot that logs all connection attempts and activity without executing commands.

KippoPython

A medium interaction SSH honeypot that logs brute force attacks and attacker shell interactions.

ssh-honeypotC

A low-interaction SSH honeypot that logs attacker IPs, usernames, and passwords for security intelligence.

sshhipotGo

A high-interaction SSH honeypot that logs and proxies attacker connections to a real SSH server.

DockerpotShell

A Docker-based honeypot that creates disposable containers to capture and analyze attack attempts.

sshsyrupGo

A low-to-medium interaction SSH honeypot written in Go that captures terminal sessions and logs attacker activity.

kippo_detectPython

A proof-of-concept tool to externally detect Kippo SSH honeypot instances.

trojeGo

A honeypot that isolates each attacker connection in a separate LXC container for monitoring and analysis.

sshForShitsGo

A framework for building high-interaction SSH honeypots with customizable command emulation.

go0rGo

A simple SSH honeypot written in Go to log and monitor unauthorized SSH login attempts.

go-sshoneyGo

A lightweight SSH honeypot that logs connection attempts, including IP, username, password, and client version.

potdC

A scalable SSH/TCP honeypot using Linux security features, designed for OpenWrt and IoT devices.

honeypot.goGo

A Go-based SSH honeypot that logs and notifies you of unauthorized SSH login attempts on your server.

ssh-honeypotC

A modified OpenSSH daemon that forwards attacker commands to Cowrie for logging and interaction interpretation.

ssh-auth-loggerGo

A low/zero interaction SSH authentication logging honeypot that logs attempts as structured JSON.

ManukaShell

A Docker-based script to deploy Dionaea and Kippo honeypots, moving SSH to port 65534 and logging attacks.