SkyGuard

What it does

SkyGuard runs as a single Go binary in front of a server. It keeps honeypot listeners for SSH, FTP, MySQL and HTTP, scores suspicious traffic, and bans repeat offenders through iptables or ufw. Everything it sees is stored in SQLite and shown on a small dashboard. It is the layer we put on servers we manage.

Built with

• Go

Sample data, drawn from how the tool behaves. Not a customer’s system.