Download
Endlessh is a great idea that not only blocks the brute force SSH attacks, but also wastes attackers time as a kind of counter-attack. Besides trapping the attackers, I also want to visualize the Geolocations and other statistics of the sources of attacks. Unfortunately the wonderful original C implementation of endlessh only provides text based log, but I do not like the solution that writes extra scripts to parse the log outputs, then exports the results to a dashboard, because it would introduce extra layers in my current setup and it would depend on the format of the text log file rather than some structured data. Thus I create this golang implementation of endlessh to export Prometheus metrics and a Grafana dashboard to visualize them.
Features
- Acts as an SSH honeypot to attract attackers
- Slows down brute-force attempts with delays
- Protects actual SSH servers by diverting traffic
- Logs attacker IP addresses and connection attempts
- Lightweight design with minimal resource usage
- Documentation available
Project Samples
