Hacker News Reader

Not “the server”, the attacker logged into a honeypot, see http://en.wikipedia.org/wiki/Honeypot_%28computing%29

It appears to be a honeypot server, which is why it is so heavily monitored. It wouldn't do much good if it was really hard to get into.

He says in the blog that it was a honeypot

I think that was left on purpose (he was also logging everything)

The server was a honeypot.