Ubuntu - Dionaea with HTTP was used for the Honeypot.

On my first personal creation of the HoneyPot, my configuration was incorrect with some of the servers and so I had to use new setup servers for a second attempt at it. Also, the initial github repo linked in the instructions was incorrect.

There were 1144 attacks. A couple of IPs had numerous attacks, including some from around the world in France especially. Not sure what malware samples could be collected from the data given in the MHN admin app.

172.31.29.245 (850 attacks)

134.119.193.57 (52 attacks)

62.210.141.119 (34 attacks)

209.141.35.236 (10 attacks)

193.56.29.40 (8 attacks)

445 (57 times)

8088 (49 times)

5060 (47 times)

139 (13 times)

80 (9 times)

dionaea (1,144 attacks)

ip-172-31-44-231 (1,144 attacks)

What types of attacks were these? What were the attackers' goals in doing so? What could they do if they actually took over a real server?