Hacker News Reader

Is there any benefit to running this vs just keeping your SSH port on 22 and running fail2ban or denyhosts which also run servers cataloging black-listed IP address (well, denyhosts supports the option, not sure about fail2ban).

View on HN

The purpose of this is to collect login and passwords as a honey pot - it is by no means a replacement for openssh or a functioning ssh server.

It is open source so it can be run on your own networks or you can just run the daemon and report stats back to sshpot.com

It allows us to collect passwords crackers are using, and banner users from using them? Increasing security by learning what the attackers are doing?

That is also another goal I would like to add - is the ability to cross-check passwords against the API so you can prevent users from using them.

Reply on news.ycombinator.com