Today I Learned

Piss-off script kiddies with SSH Tarpit

SSH tarpits are a thing to waste the time of automated scanners.

1 min read devops, ssh, hacking

Endlessh is an SSH tarpit that very slowly sends an endless, random SSH banner. It keeps SSH clients locked up for hours or even days at a time. The purpose is to put your real SSH server on another port and then let the script kiddies get stuck in this tarpit instead of bothering a production server.

There are many types of Tarpits by definition Tarpits are network services that intentionally insert delays in the protocol, slowing down clients by forcing them to wait.

git clone git@github.com:skeeto/endlessh.git
cd endlessh
make && make install

And now run it:

endlessh -v >endlessh.log 2>endlessh.err

References:

Your turn

Let's compare notes

Got a different take, a story that backs this up, or a question it left open? Reply on X, or get in touch. I read every reply.

Newsletter

The Pragmatic CTO

Hard-won lessons on scaling teams and technology, from a CTO who's made the mistakes so you don't have to.

Subscribe