Tech riderRev. 4 Oct 2026
Endlessh
- 1Runs onLinux, self-hosted
- 2CostsFree plan
- 3Deployment modelself-hosted
- 4Decoy scopenetwork
- 5Credential luresNo
5 lines stated Written from the maker's own pages: github.com

Overview
Endlessh is ranked #11 of 18 in honeypot software on Specifiction. It runs on Linux, Self-hosted. There is a free plan.
Endlessh plans and pricing
All plansEndlessh Free SSH tarpit · standalone C program · maximum 4096 clients by default github.com · 4 Oct 2026
Compared on honeypot software
- Deployment model
- self-hostedgithub.com
- Decoy scope
- networkgithub.com
- Credential lures
- Nogithub.com
Facts
- Purpose
- Endlessh slowly sends an endless, random SSH banner to keep SSH clients occupied for hours or days.github.com · 4 Oct 2026
- Use case
- The project describes placing a real SSH server on another port so unwanted SSH clients get stuck in the tarpit instead.github.com · 4 Oct 2026
- Implementation
- Endlessh is a standalone, single-threaded C program that uses poll() to handle multiple clients.github.com · 4 Oct 2026
- Cryptography
- The banner is sent before any cryptographic exchange, so the program does not depend on cryptographic libraries.github.com · 4 Oct 2026
- Banner controls
- The delay between messages defaults to 10000 milliseconds, and the maximum banner line length defaults to 32 characters.github.com · 4 Oct 2026
- Connection limit
- The maximum number of clients defaults to 4096, and excess connections wait in the queue.github.com · 4 Oct 2026
- Network support
- Endlessh supports IPv4 and IPv6, with options to bind to either address family alone.github.com · 4 Oct 2026
- Logging
- Diagnostics are quiet by default; repeatable verbosity flags enable standard and debug logging, and logs can be sent to syslog.github.com · 4 Oct 2026
- Configuration
- The configuration file uses syntax similar to OpenSSH and defaults to /etc/endlessh/config.github.com · 4 Oct 2026
- Signals
- SIGTERM gracefully shuts down the daemon, SIGHUP reloads its configuration, and SIGUSR1 prints connection statistics to the log.github.com · 4 Oct 2026
- License
- The repository identifies its license as the Unlicense.github.com · 4 Oct 2026
- Build platforms
- The project documents build adjustments for RHEL 6/CentOS 6, Solaris/illumos, and OpenBSD.github.com · 4 Oct 2026
- Integrations
- The README describes logging to standard output or syslog and does not list third-party service integrations.github.com · 4 Oct 2026
- Support
- The repository provides GitHub Issues and Pull Requests for project discussion and contributions.github.com · 4 Oct 2026
Best Endlessh alternatives
See all 17 All accessCh 01 OpenCanary Free planLinuxMac Free to start7.3 All accessCh 02 Beelzebub Free planFree trialAPI Free to start7.2 All accessCh 03 Canarytokens Free planAndroidiOS Free to start7.2 All accessCh 04 Honeyd Free planLinuxself-hosted Free to start7.0 All accessCh 05 T-Pot Free planLinuxMac Free to start7.0 All accessCh 06 Cowrie Free planLinuxself-hosted Free to start6.9
Where it ranks on Specifiction
- Best Honeypot Software in 2026#11 of 18
Is Endlessh yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- github.com/skeeto/endlessh· checked 4 Oct 2026


