aayusharyan/fake-iis

fake-iis is a Docker container that pretends to be a Microsoft IIS 8.0 web server. When a browser or automated scanner connects to it, the container returns the same default splash page that IIS 8.0 would show, complete with matching HTTP response headers that identify the server as IIS and ASP.NET. It also serves a web.config endpoint with the expected content type and returns IIS-styled error pages for 403, 404, and 500 responses. The main use case is as a decoy or honeypot in a homelab or network. By running a convincing-looking IIS server on a port you want to monitor or misdirect, you can attract and observe scanners and automated probes without exposing a real service. All access and error logs are silently dropped inside the container, so there is no log noise to manage. Running it requires Docker. You can either pull the pre-built image from the GitHub Container Registry with a single command, or copy the provided Docker Compose example file, adjust the port mapping, and start it with docker compose. The container is built on OpenResty, which is a version of nginx with additional scripting capabilities, running on Alpine Linux to keep the image size small. The project is released under the MIT license.