SSH tar pit that slowly sends an endless banner to keep SSH clients connected, consuming their resources and preventing brute force attacks.
endlessh {flag-port} {flag-bind} {flag-ms} {flag-verbose} {flag-log} 📎 flag-port 📎 flag-bind 📎 flag-ms 📎 flag-verbose 📎 flag-log endlessh {flag-port} {flag-bind} {flag-ms} {flag-verbose} {flag-log}Sandbox: execFile · Timeout: 60s
honeypot.ssh.tarpit honeypot.ssh.attract defense.ssh.rate-limit | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
flag-port | integer | No | - | Port to listen on (default 22) | -p, --port |
flag-bind | string | No | - | Address to bind to (default all) | -b, --bind |
flag-ms | integer | No | - | Milliseconds to sleep between lines (default 100) | -m, --ms |
flag-verbose | boolean | No | - | Log IP addresses | -v, --verbose |
flag-log | string | No | - | Log file path | -l, --log |
flag-version | boolean | No | - | Print version and exit | -V, --version |
| Type | Description | MIME | Schema | Trust |
|---|---|---|---|---|
honeypot.log | Connection logs | text/plain | - | verified |
Inputs
network.port SSH port to listen on
Outputs
honeypot.log Log file with connection attempts
network_traffic Produces
honeypot.logConsumes
network.port| Resource | Value |
|---|---|
| CPU | low |
| Memory | 32 MB |
| Network | low |
| Disk I/O | low |
Run with default settings
endlesshListen on port 2222 with verbose logging
endlessh -p 2222 -vCustom bind address and log file
endlessh -b 192.168.1.100 -l /var/log/endlessh.logSlow response (500ms delay)
endlessh -m 500endlessh is a minimalist SSH tar pit that keeps clients occupied with an endless banner, consuming their resources without providing a usable shell. It's useful for frustrating automated brute-force scanners and reducing SSH login attempts.
# Default: listen on port 22, log to stderr
endlessh
# Listen on custom port with verbose logging
endlessh -p 2222 -v
# Bind to specific address and log to file
endlessh -b 192.168.1.100 -l /var/log/endlessh.log
# Slow response (500ms between lines)
endlessh -m 500