I was curious about what kind of attacks my server was getting, so I set up a honeypot to see what happened. In other cases, a honeypot is a program that runs on a server that is designed to look like a vulnerable target for hackers. First and foremost, a honeypot allows cybersecurity experts (or a dedicated self-hoster) to determine what kind of attacks their server is experiencing. Are the hackers attempting to attack a specific port, which indicates they're aiming to exploit a specific service? If everything went well, you should see a list of running honeypots.