Hypothesis: Running an [old, non-upgradeable OS] honeypot increases the probability of further scans and intrusion attempts on that range for awhile at least.

Hypothesis: Running an [old, non-upgradeable OS] honeypot increases the probability of further scans and intrusion attempts on that range for awhile at least. paralax/awesome-honeypots: https://awesomerank.github.io/lists/paralax/awesome-honeypots.html https://awesomerank.github.io/lists/paralax/awesome-honeypot... Wireshark works with tcpdump over SSH. A VM guest virtual network adapter can also be monitored from the VM host. But a human could spend all day trolling for VM escape exploits with a honeypot.