A secondary issue here is that these are largely low quality honeypots that are easily avoided by actual attackers (and are avoided by many in practice) and sol

A secondary issue here is that these are largely low quality honeypots that are easily avoided by actual attackers (and are avoided by many in practice) and solely seem to exist to fuck up statistical measurements. I’ve ran honeypots, I still run some - it’s not hard to do properly. There’s hundreds of thousands of ones clogging up search results on Shodan, etc, though that are absolute rubbish