This is hilarious, and a fun exercise to try out if you want to learn how attacks are pulled off. It's worth having a few 'honey credentials' sitting in plaintext on the honeypot HDD and watch as the threat actors try to use them. Also worth enabling SSH and watch for login attempts like in this: https://brute.fail/