Name:

    sshpot


Description:

    An ssh server that never authenticates. Instead, it logs the username,
    password, IP address and time of every login attempt.


Installation:

    1. Generate an RSA public key for use by the server:
        > ssh-keygen -t rsa

    2. Edit config.h to set the desired options. In particular, you must set
       RSA_KEYFILE to the path to the public key generated in step one. LOGFILE 
       must be set to a location where the user running sshpot can write.

    3. Compile the software:
        > make
        # make install (optional, but necessary to listen on ports < 1024.)


Usage: sshpot [-h] [-p <port>] [-m <connections>] [-s <connections>] [-b <ssh-server-banner>]
   -h  --help               Display this usage information.
   -d                       Set debug to print on stderr.
   -p  --port <port>        Port to listen on; defaults to 22.
   -m  --max <connections>  Maximum number of connections; defaults to 15.
   -s  --same <connections> Maximum number of connections from same ip; defaults to 3.
   -b  --banner <banner>    The ssh Server banner; defaults to:
    'OpenSSH_8.2p1 Ubuntu-4ubuntu0.5, OpenSSL 1.1.1f  31 Mar 2020'.

Dependencies:

    libssh http://www.libssh.org/

There is also a fail2ban configuration included that you can use to redirect
brute force ssh logins from your real ssh server towards sshpot.