jaksi / sshesame

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
Apache License 2.0
1.5k stars 90 forks source link

Ability to log the IP address of a rejected connection? #120

Open TheHippoMan opened 1 year ago

TheHippoMan commented 1 year ago

I set up my sshesame server to only allow public key auth, and, of course, when hackers try to break into my system, these attempts are usually rejected (which I want). When a remote host is rejected by my sshesame server in this way, I get the following warning message:

WARNING 2023/08/11 14:15:46 Failed to accept connection: Failed to establish SSH server connection: ssh: disconnect, reason 11: Normal Shutdown, Thank you for playing

Is there any way to get the remote host's IP address to show up in this warning message?

Thank you very much in advance.