Honeypots & Deception for Ssh
Honeypots & Deception tools for Ssh: the Honeypots & Deception options most relevant when Ssh is the priority, compared side by side so you can shortlist faster. Filter by pricing or specialization. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
We cover 35 cybersecurity tools
FEATURED
USE CASES
Public honeypot fleet dashboard showing global attack telemetry and threat intel.
Open-source LLM-powered deception framework for multi-protocol honeypot services.
Honeypot platform deploying network decoys to detect intrusions with zero false positives
Fake protocol server simulator supporting 50+ network protocols for deception
The DShield Raspberry Pi Sensor is a tool that turns a Raspberry Pi into a honeypot to collect and submit security logs to the DShield project for analysis.
High interaction honeypot solution for Linux systems with data control and integrity features.
A Docker container that starts a SSH honeypot and reports statistics to the SANS ISC DShield project
Endlessh is an SSH tarpit that traps SSH clients by sending an endless, random SSH banner.
A low-interaction SSH honeypot written in C that simulates SSH services to capture and log unauthorized access attempts.
Honey-Pod for SSH that logs username and password tries during brute-force attacks.
Tool for setting up Glutton, a cybersecurity tool for monitoring SSH traffic.
Blacknet is a low interaction SSH multi-head honeypot system with logging capabilities.
Syrup is a Go-based SSH honeypot that simulates SSH services with fake shells, session recording, and comprehensive logging to monitor and analyze unauthorized access attempts.
A webapp for displaying statistics about your kippo SSH honeypot.
Fake SSH server that sends push notifications for login attempts
A low-interaction SSH honeypot tool for recording authentication attempts.
High-interaction SSH honeypot for logging SSH proxy with ongoing development.
A Python-based honeypot service for SSH, FTP, and Telnet connections
A simple honeypot that collects credentials across various protocols
An easy to set up SSH honeypot for logging SSH connections and activity.
A network responder supporting various protocols with minimal assumptions on client intentions.
Troje is a honeypot that creates dynamic LXC container environments to attract and monitor attackers while recording their activities and system changes.
