gohoney
SSH Honeypot written in Go that records commands and IP addresses of attempted logins.
SSH Honeypot written in Go that records commands and IP addresses of attempted logins.
Checked October 2026.
This SSH daemon will accept any username/password/key. It only allows 'session' channels (not port forwards or SFTP). It will present a fake shell and record any commands that people attempt to run, along with the date and their IP. It will log all sessions to: /var/log/gohoney/gohoney-yyyymmdd.log
Build & Run First download and install Go. On OSX this is as easy as: $ brew install go For other linux/windows/freebsd check http://golang.org Then build it! # Clone this repo $ git clone https://github.com/PaulMaddox/gohoney.git # Fetch all of the Go module dependencies $ cd gohoney $ go get ./... # Build it! $ go build main.go
Usage Usage: ./gohoney -b <bind address> -p <port>
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about gohoney: features, pricing and alternatives.
gohoney is a product in the Honeypots & Deception category. It covers SSH.
gohoney is free. Download and setup instructions are at https://github.com/PaulMaddox/gohoney/.
Alternatives to gohoney listed on CybersecTools:
Compare all gohoney alternatives at https://cybersectools.com/alternatives/gohoney
gohoney is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A set of Go-based emulators for testing network security and analyzing network traffic.
A Go-based honeypot server for detecting and logging attacker activity
A simple SSH honeypot written in Golang with a Persian-inspired name.
GridPot is a honeypot framework that combines GridLAB-D, Conpot, and libiec61850 to simulate industrial control systems and detect attacks on power grid infrastructure.
AI-powered deception platform using honeypots to detect & disrupt attacks
Helix is a versatile honeypot designed to mimic the behavior of various protocols including Kubernetes API server, HTTP, TCP, and UDP.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,032 products.
Connect your AI
