My little "lab of vulnerable devices" is still getting regular visits from script kiddies world wide. By now, I replaced some of the simulated honeypots with actual devices, giving me a bit a more accurate view of what is happening and how attackers are distinguishing honeypots from real devices.
read more......https://isc.sans.edu/diary/Busybox+Honeypot+Fingerprinting+and+a+new+DVR+scanner/18055
read more......https://isc.sans.edu/diary/Busybox+Honeypot+Fingerprinting+and+a+new+DVR+scanner/18055