Paper

Prevalence of IoT Protocols in Telescope and Honeypot Measurements

The authors describe a measurement study of attacks against or based on IoT protocols, using data obtained from a /15 network telescope and three honeypots with 15 IPv4 addresses. The study reports that telnet-based malware is still widely used, that infected devices are employed not only for DDoS attacks but also for crypto-currency mining, and that attackers look for IoT-specific services using MQTT, CoAP, UPnP, and HNAP, and target vulnerabilities of routers and cameras with HTTP.

HoneypotIoTNetwork

What we know

The authors describe a measurement study of attacks against or based on IoT protocols, using data obtained from a /15 network telescope and three honeypots with 15 IPv4 addresses. The study reports that telnet-based malware is still widely used, that infected devices are employed not only for DDoS attacks but also for crypto-currency mining, and that attackers look for IoT-specific services using MQTT, CoAP, UPnP, and HNAP, and target vulnerabilities of routers and cameras with HTTP.

Evidence limits

Review is limited to the Crossref deposited abstract; the full text was not read and the results were not independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Prevalence of IoT Protocols in Telescope and Honeypot Measurements
    abstract · 2026-10-11

Reviewed: 2026-10-16. This record may change when new evidence is found.

RIS · BibTeX