I would like to know if anyone has ever implemented a SSH trap. It would be interesting to set up a system where if someone was to port scan my computer they would find my SSH port open(port 22) and then they might try to connect to it via ssh using some simple easily guessable passwords. I want a process sitting on the otherside to allow them to connect then have that process to try and gather data on the attackers machine. Has anyone tried to implement something like this. I thing aggressively defending a machine is better than just merely defending a machine.