FakeSSH

A dockerized honeypot SSH server written in Go to log login attempts. Password authentications always fail so no terminal access is given to the attacker.

Quick Start

go install github.com/fffaraz/fakessh@latest
sudo setcap 'cap_net_bind_service=+ep' ~/go/bin/fakessh
fakessh [optional-log-directory]

OR

docker run -it --rm -p 22:22 fffaraz/fakessh

OR

docker run -d --restart=always -p 22:22 --name fakessh fffaraz/fakessh
docker logs -f fakessh

See also

• jaksi/sshesame - A fake SSH server that lets everyone in and logs their activity.
• shazow/ssh-chat - Custom SSH server written in Go. Instead of a shell, you get a chat prompt.
• gliderlabs/ssh - Easy SSH servers in Golang.
• gliderlabs/sshfront - Programmable SSH frontend.
• desaster/kippo - Kippo - SSH Honeypot.
• micheloosterhof/cowrie - Cowrie SSH/Telnet Honeypot.
• fzerorubigd/go0r - A simple ssh honeypot in golang.
• droberson/ssh-honeypot - Fake sshd that logs ip addresses, usernames, and passwords.
• x0rz/ssh-honeypot - Fake sshd that logs ip addresses, usernames, and passwords.
• tnich/honssh - HonSSH is designed to log all SSH communications between a client and server.
• Learn from your attackers - SSH HoneyPot
• cowrie - Cowrie SSH/Telnet Honeypot.