What we know
Low-interaction SSH honeypot packaged in a Docker container that listens on port 2222, logs IP addresses, usernames, and passwords from login attempts, and then disconnects the client.
Evidence limits
The behavior described in the README (credential capture and logging) is documented by the author but has not been independently verified; it is noted as being for research and educational purposes only.
Sources and provenance
- random-robbie/docker-ssh-honey repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.