{"name":"sshpot: Log SSH Login Attempts with a Honeypot","description":"sshpot is a small C-based SSH honeypot that rejects every login while recording attempted usernames, passwords, IP addresses, and times. It may suit controlled research or monitoring, but its long inactivity makes it a poor fit for systems needing ongoing maintenance.","github":"https://github.com/kingtuna/sshpot","url":"https://osrepos.com/repo/kingtuna-sshpot","source":"osrepos.com","sourceDescription":"This repository profile is provided by osrepos.com, an open source repository discovery platform.","repositoryProfile":"https://osrepos.com/repo/kingtuna-sshpot","generatedFor":"open source discovery and AI-assisted research","markdown":"https://osrepos.com/repo/kingtuna-sshpot.md","json":"https://osrepos.com/repo/kingtuna-sshpot.json","topics":["c","security","networking","ssh-honeypot","credential-logging","intrusion-detection"],"keywords":["c","security","networking","ssh-honeypot","credential-logging","intrusion-detection"],"stars":null,"summary":"sshpot is a small C-based SSH honeypot that rejects every login while recording attempted usernames, passwords, IP addresses, and times. It may suit controlled research or monitoring, but its long inactivity makes it a poor fit for systems needing ongoing maintenance.","content":"## Overview\n\nsshpot runs an SSH server that never authenticates users. Instead, it records details of login attempts, giving administrators and security researchers a way to observe activity directed at an SSH endpoint.\n\nIt is a narrow, lightweight tool rather than a general SSH security suite. Its value is in collecting attempted credentials and connection details; it does not provide legitimate remote access.\n\n## Key Features\n\n- Runs an SSH honeypot that rejects every authentication attempt.\n- Logs the attempted username and password.\n- Records the source IP address and time of each attempt.\n- Lets operators configure the RSA public key and log file through `config.h`.\n- Supports choosing a listening port, with port 22 as the default.\n- Uses libssh and is built with `make`.\n\n## Use Cases\n\n- Security researchers can collect attempted credentials on an isolated, controlled SSH endpoint.\n- Administrators can observe login activity targeting a server or network they are authorized to monitor.\n- Learners can examine how SSH honeypot logging works using a small C program.\n- Operators who need a simple credential-attempt logger may use it for a limited experiment, provided they account for its age and maintenance status.\n\n## Our Take\n\nsshpot has a clear, narrow purpose, but its prolonged inactivity and concentrated development make it difficult to recommend for a maintained security deployment.\n\n**Good fit if:**\n- You need a basic SSH endpoint that rejects logins and logs attempted credentials and connection details.\n- You can build and configure a C program that depends on libssh.\n- You are evaluating it in a controlled environment and can review the code yourself.\n\n**Look elsewhere if:**\n- You need ongoing fixes or active development: there have been no commits in years and no recent releases.\n- You need a project with broader contributor support, since most of the code comes from one person.\n- You need a clearly specified license for adoption; the supplied repository metadata does not identify one.\n\n## Project Health\n\n| Signal | Value |\n|---|---|\n| Status | **Inactive**: no commits in over a year |\n| Last commit | 2014-04-24 (12.5 years ago) |\n| Commits, last 90 days | 0 |\n| Releases, last 12 months | 0 |\n| Contributors | 2 (top contributor: 83% of commits) |\n| Issues closed, last 90 days | 0 |\n| Pull requests merged, last 90 days | 0 |\n| Project age | 12 years |\n\nChecked on 2026-10-11 with the GitHub API.\n\n## Project Facts\n\n- Language: C\n- Stars: 33\n- Forks: 31\n- Archived: no\n\n## What You Need\n\nDetected in the repository:\n\n- C (main language on GitHub)\n\n## Getting Started\n\nGenerate an RSA key, configure `RSA_KEYFILE` and a writable `LOGFILE` in `config.h`, then build and run:\n\n```sh\nmake\n./sshpot [-p <port>]\n```\n\nSee the [repository README](https://github.com/kingtuna/sshpot#readme) for installation details, including optional installation for listening on ports below 1024.\n\n## License in Plain Words\n\nNo standard license was detected. Without a license, the default copyright rules apply: you may read the code, but not reuse it. Check the repository or ask the authors.\n\n## Considerations\n\nThe project is inactive, with no recent commits or releases, and development is concentrated in one contributor. The supplied health data reports no recent issue or pull-request activity, so there is little evidence of ongoing maintenance or support. The README requires libssh, an RSA public key, and a log file writable by the account running sshpot. Because it records attempted passwords, deployment should be limited to systems and networks you are authorized to monitor, with access to the log file considered carefully. The supplied metadata does not specify a license, so verify licensing before incorporating or redistributing the code.","metrics":{"detailViews":9,"githubClicks":19},"dates":{"published":null,"modified":"2026-10-11T01:30:49.000Z"}}