In July I ran three honeypots with a view to examining attacker behaviour. Results published on my latest #blog post. Interestingly there's been differences every time I've done this research.
https://blog.jonsdocs.org.uk/2025/09/26/honeypots-2025-three-countries/