I run endlessh-go (https://github.com/shizunge/endlessh-go) as an SSH tarpit
on my VPS. It traps bots by slowly sending an endless SSH banner and reports
metrics to InfluxDB.
I wanted a fun way to see what it catches, so I built a fishing game around
it. Every bot gets classified as a fish species based on trap duration — from
Plankton (< 30s) to Leviathan (14+ days). There are achievements, daily
challenges, a treasure system with security tips, and IP intelligence via
Shodan/AbuseIPDB.
Requires: endlessh-go + InfluxDB 2.x (as data source), then just
`docker compose up -d` and it handles the rest.
I run endlessh-go (https://github.com/shizunge/endlessh-go) as an SSH tarpit on my VPS. It traps bots by slowly sending an endless SSH banner and reports metrics to InfluxDB.
I wanted a fun way to see what it catches, so I built a fishing game around it. Every bot gets classified as a fish species based on trap duration — from Plankton (< 30s) to Leviathan (14+ days). There are achievements, daily challenges, a treasure system with security tips, and IP intelligence via Shodan/AbuseIPDB.
Requires: endlessh-go + InfluxDB 2.x (as data source), then just `docker compose up -d` and it handles the rest.
Stack: Django, Celery, PostgreSQL, HTMX. Fully self-hosted, no external resources loaded (GDPR-friendly).
Happy to answer any questions!