Stop SSH bruteforce with endlessh

Endlessh is an open source SSH trapit. It send slow random banner string to attacker, wasting their time.

Before you install endlessh, you need to change your SSH port to a higher non default port. To do this edit

Find

Replace with

If the line is commented with #, uncomment it.

Now you can install endlessh with

By default endlessh run on port 2222. To change it to port 22, edit file

Find

Replace with

Find

Replace with

Run

Create endlessh configuration file

Add following content

If you need to enable log, set LogLevel to 1.

Enable and restart endlessh

Leave a Reply

Your email address will not be published. Required fields are marked *