The attacker accessed the honeypot, and John was able to track their movements. He discovered that the attacker was using a VPN to hide their IP address, but he was able to identify the VPN provider.
Features for port scanning, reverse shells, and even sending spoofed emails. Self-Destruction: b374k.php