A dockerized SSH honeypot server written in Go that logs login attempts. Password authentication always fails, so no terminal access is granted to the attacker.
go install github.com/fffaraz/fakessh@latest
sudo setcap 'cap_net_bind_service=+ep' ~/go/bin/fakessh
fakessh [optional-log-directory]
OR
docker run -it --rm -p 22:22 ghcr.io/fffaraz/fakessh
OR
docker run -d --restart=always -p 22:22 --name fakessh ghcr.io/fffaraz/fakessh
docker logs -f fakessh
- jaksi/sshesame - A fake SSH server that lets everyone in and logs their activity
- shazow/ssh-chat - Custom SSH server written in Go; instead of a shell, you get a chat prompt
- gliderlabs/ssh - Easy SSH servers in Golang
- gliderlabs/sshfront - Programmable SSH frontend
- desaster/kippo - SSH honeypot
- micheloosterhof/cowrie - SSH/Telnet honeypot
- fzerorubigd/go0r - A simple SSH honeypot in Go
- droberson/ssh-honeypot - Fake sshd that logs IP addresses, usernames, and passwords
- x0rz/ssh-honeypot - Fake sshd that logs IP addresses, usernames, and passwords
- tnich/honssh - Logs all SSH communications between a client and server
- Learn from your attackers - SSH HoneyPot
- cowrie - SSH/Telnet honeypot