FakeSSH

A dockerized fake SSH server honeypot written in Go that logs login attempts. The password authentications always fail anyway so no terminal access is given to the attacker.

Quick Start

docker run -it --rm -p 22:22 fffaraz/fakessh

OR

docker run -d --restart=always -p 22:22 --name fakessh fffaraz/fakessh
docker logs -f fakessh

See also

• jaksi/sshesame - A fake SSH server that lets everyone in and logs their activity.
• shazow/ssh-chat - Custom SSH server written in Go. Instead of a shell, you get a chat prompt.
• gliderlabs/ssh - Easy SSH servers in Golang.
• gliderlabs/sshfront - Programmable SSH frontend.
• desaster/kippo - Kippo - SSH Honeypot.
• micheloosterhof/cowrie - Cowrie SSH/Telnet Honeypot.
• fzerorubigd/go0r - A simple ssh honeypot in golang.
• droberson/ssh-honeypot - Fake sshd that logs ip addresses, usernames, and passwords.
• x0rz/ssh-honeypot - Fake sshd that logs ip addresses, usernames, and passwords.
• tnich/honssh - HonSSH is designed to log all SSH communications between a client and server.
• Learn from your attackers - SSH HoneyPot
• cowrie - Cowrie SSH/Telnet Honeypot.