awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
skeeto avatar

skeeto/endlessh

0
View on GitHub↗
8,477 stars·302 forks·C·Unlicense·15 views

Endlessh

Endlessh is an SSH tarpit and network honeypot designed to mitigate automated SSH brute force attacks. It acts as a defensive layer that protects servers by diverting malicious connection attempts into a slow-motion trap.

The project implements a tarpit by sending endless, throttled banners to clients, which keeps connections open indefinitely to occupy attacker resources and slow down network scans.

The service includes connection rate limiting to prevent system resource exhaustion and provides monitoring through connection activity and diagnostic data logging to system logs. Process management is handled via system signals for configuration reloads and statistics reporting.

Features

  • SSH Brute Force Mitigation - Protects servers from automated SSH brute force attempts by diverting traffic into a slow connection trap.
  • Automated Attack Diversion - Sends endless slow banners to clients to occupy connections and distract attackers from real servers.
  • SSH Connection Tarpitting - Sends slow random banners to clients to keep connections open and divert automated attacks.
  • Service Abuse Protections - Protects server resources by managing concurrent connection limits to prevent service exhaustion.
  • SSH Attack Mitigators - Provides a defensive layer that diverts malicious SSH connection attempts into a slow-motion trap.
  • SSH Attack Diversion - Sends slow motion banners to clients to occupy connections and prevent access to real servers.
  • SSH Tarpits - Implements a security tool that slows down SSH connections by sending an endless banner.
  • Tarpit Data Emission - Transmits throttled banners to occupy attacker resources and slow down network scans.
  • Network Security Monitoring - Logs connection attempts and activity patterns to analyze the source of automated SSH attacks.
  • Connection Rate Limiting - Implements limits on concurrent sockets to prevent system resource exhaustion during attacks.
  • Blocking Connection Flows - Manages client connections through a blocking flow to maintain the tarpit state.
  • Concurrency Limiters - Caps the maximum number of concurrent clients to protect system resources from exhaustion.
  • Honeypots and Tarpits - SSH tarpit that slows down scanners by sending an infinite banner.
  • SSH Honeypots - SSH tarpit that slows down connection attempts.

Star history

Star history chart for skeeto/endlesshStar history chart for skeeto/endlessh

How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Open-source alternatives to Endlessh

Similar open-source projects, ranked by how many features they share with Endlessh.
  • supervisor/supervisorSupervisor avatar

    Supervisor/supervisor

    9,068View on GitHub↗

    Supervisor is a process control system for Unix environments that ensures background processes remain running by automatically restarting them if they crash or exit. It functions as a daemon manager that provides a centralized way to start, stop, and monitor the lifecycle of long-running background tasks. The system utilizes a client-server architecture to control multiple processes through a command line interface. This allows for the orchestration of system services and background daemon control without requiring manual shell intervention. The tool covers application process supervision an

    Python
    View on GitHub↗9,068
  • webmin/webminwebmin avatar

    webmin/webmin

    5,595View on GitHub↗

    Webmin is a web-based administration interface for Unix systems. It provides a centralized console for managing the full range of server administration tasks — users and groups, software packages, storage, network configuration, system services, and security — all through a browser. Its modular architecture allows separate modules to handle databases (MySQL, MariaDB, PostgreSQL), web servers (Apache), DNS (BIND), email (Sendmail, Dovecot), file sharing (Samba, NFS), and more, with a unified access control system that restricts what each administrator can see and do. What sets Webmin apart is

    HTML
    View on GitHub↗5,595
  • atuinsh/atuinatuinsh avatar

    atuinsh/atuin

    30,266View on GitHub↗

    Atuin is a command-line tool that replaces standard shell history with a searchable, encrypted SQLite database. By hooking into shell initialization scripts, it provides an interactive, keyboard-driven interface for real-time command filtering and retrieval. The platform ensures data privacy through a client-side encryption layer, securing sensitive history and configuration data before it is synchronized across multiple machines. Beyond history management, Atuin functions as an executable documentation platform that enables teams to create and share interactive runbooks. These documents use

    Rustbashfishhistory
    View on GitHub↗30,266
  • security-onion-solutions/securityonionSecurity-Onion-Solutions avatar

    Security-Onion-Solutions/securityonion

    4,661View on GitHub↗

    Security Onion is a security information and event management platform and network security monitoring suite. It functions as an intrusion detection system and a network traffic analysis tool designed to identify malicious activity and network intrusions through signature-based detection and host-based monitoring. The platform integrates a security case management system to organize investigations by tracking detections and grouping related security events. It provides capabilities for full packet capture, network metadata extraction, and the collection and indexing of security logs from dive

    Shell
    View on GitHub↗4,661
See all 30 alternatives to Endlessh→

Frequently asked questions

What does skeeto/endlessh do?

Endlessh is an SSH tarpit and network honeypot designed to mitigate automated SSH brute force attacks. It acts as a defensive layer that protects servers by diverting malicious connection attempts into a slow-motion trap.

What are the main features of skeeto/endlessh?

The main features of skeeto/endlessh are: SSH Brute Force Mitigation, Automated Attack Diversion, SSH Connection Tarpitting, Service Abuse Protections, SSH Attack Mitigators, SSH Attack Diversion, SSH Tarpits, Tarpit Data Emission.

What are some open-source alternatives to skeeto/endlessh?

Open-source alternatives to skeeto/endlessh include: supervisor/supervisor — Supervisor is a process control system for Unix environments that ensures background processes remain running by… webmin/webmin — Webmin is a web-based administration interface for Unix systems. It provides a centralized console for managing the… atuinsh/atuin — Atuin is a command-line tool that replaces standard shell history with a searchable, encrypted SQLite database. By… zeek/zeek — Zeek is a network analysis framework and security monitoring tool that transforms raw network packets into high-level… security-onion-solutions/securityonion — Security Onion is a security information and event management platform and network security monitoring suite. It… micheloosterhof/cowrie — Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers,…