Discussion Tested with scanssh via 100 MBit link on a 10.0/16: Honeyd keeps up until it reached system limits. Honeyd is used on six static IP addresses for testing purposes. Not enough data for real data analysis. Still gets many scans. Scans mostly for web servers, also ssh and ftp.