
SSH Honeypot written in Go that records commands and IP addresses of attempted logins.

SSH Honeypot written in Go that records commands and IP addresses of attempted logins.
gohoney is a Honeypots & Deception product. Pricing is free.
This SSH daemon will accept any username/password/key. It only allows 'session' channels (not port forwards or SFTP). It will present a fake shell and record any commands that people attempt to run, along with the date and their IP. It will log all sessions to: /var/log/gohoney/gohoney-yyyymmdd.log Build & Run First download and install Go. On OSX this is as easy as: $ brew install go For other linux/windows/freebsd check http://golang.org Then build it! # Clone this repo $ git clone https://github.com/PaulMaddox/gohoney.git # Fetch all of the Go module dependencies $ cd gohoney $ go get ./... # Build it! $ go build main.go Usage Usage: ./gohoney -b <bind address> -p <port>
Common questions about gohoney including features, pricing, alternatives, and user reviews.
gohoney is SSH Honeypot written in Go that records commands and IP addresses of attempted logins. It is a Security Operations solution designed to help security teams with SSH.
gohoney is built for security teams handling SSH. Teams typically adopt gohoney when they need to security operations capabilities integrated into their existing stack. Explore similar tools at https://cybersectools.com/alternatives/gohoney
gohoney is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/PaulMaddox/gohoney/ for download and installation instructions.
Popular alternatives to gohoney include:
Compare all gohoney alternatives at https://cybersectools.com/alternatives/gohoney
gohoney is for security teams and organizations that need SSH. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Head-to-head feature, pricing, and rating breakdowns.
Public honeypot fleet dashboard showing global attack telemetry and threat intel.
Fake protocol server simulator supporting 50+ network protocols for deception