Endlessh

6.7easy start · #8 of 18
in Honeypot Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on Linux, self-hosted.

Endlessh is ranked #8 of 18 in honeypot software on The Geeks Club. It runs on Linux, Self-hosted. There is a free plan.

Endlessh plans and pricing

All plans

Endlessh Free SSH tarpit · standalone C program · maximum 4096 clients by default github.com · 4 Oct 2026

Compared on honeypot software

Deployment model: self-hosted
Decoy scope: network
Credential lures: No

Best Endlessh alternatives

See all 17

Beelzebub 0 of 4 in the starter kit Lesson 17.5 OpenCanary 0 of 4 in the starter kit Lesson 27.3 Canarytokens 0 of 4 in the starter kit Lesson 37.0 Cowrie 0 of 4 in the starter kit Lesson 47.0 Heralding 0 of 4 in the starter kit Lesson 56.9 T-Pot 0 of 4 in the starter kit Lesson 66.9

The record

Purpose: Endlessh slowly sends an endless, random SSH banner to keep SSH clients occupied for hours or days.
Use case: The project describes placing a real SSH server on another port so unwanted SSH clients get stuck in the tarpit instead.
Implementation: Endlessh is a standalone, single-threaded C program that uses poll() to handle multiple clients.
Cryptography: The banner is sent before any cryptographic exchange, so the program does not depend on cryptographic libraries.
Banner controls: The delay between messages defaults to 10000 milliseconds, and the maximum banner line length defaults to 32 characters.
Connection limit: The maximum number of clients defaults to 4096, and excess connections wait in the queue.
Network support: Endlessh supports IPv4 and IPv6, with options to bind to either address family alone.
Logging: Diagnostics are quiet by default; repeatable verbosity flags enable standard and debug logging, and logs can be sent to syslog.
Configuration: The configuration file uses syntax similar to OpenSSH and defaults to /etc/endlessh/config.
Signals: SIGTERM gracefully shuts down the daemon, SIGHUP reloads its configuration, and SIGUSR1 prints connection statistics to the log.
License: The repository identifies its license as the Unlicense.
Build platforms: The project documents build adjustments for RHEL 6/CentOS 6, Solaris/illumos, and OpenBSD.
Integrations: The README describes logging to standard output or syslog and does not list third-party service integrations.
Support: The repository provides GitHub Issues and Pull Requests for project discussion and contributions.
Price from: Free

Where it ranks on The Geeks Club

Best Honeypot Software in 2026#8 of 18

Is Endlessh yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Endlessh

Sources

github.com/skeeto/endlessh· checked 4 Oct 2026