Nova is a software application for preventing and detecting hostile network reconnaissance (such as nmap scans). It does this by first creating the Haystack: a large collection of low interaction honeypots using an updated version of Honeyd. Finding real machines on the network becomes like finding a needle in a haystack of fake machines. Second, Nova uses machine learning algorithms to automatically detect and classify attempts at hostile reconnaissance, so there's no need to go searching manually through your honeypot's log files. It provides an easy to use Web-based interface powered by Node.js to configure itself and Honeyd instances.
fake sshd is a fake SSH daemon that logs password attack attempts. It differs from other tools by being built with libssh instead of being a modified version of OpenSSH. It provides no way to login to a shell and can be used to tarpit or delay attackers, and "steal" an attacker's dictionary.