I front all my honeypots with the IIS landing page precisely because it attracts black hat jagoffs.
Nothing makes me happier than knowing I've wasted hours of their time chasing their own tails.
Why stop there? Front the honeypot with a real IIS server, build a matryoshka doll of honeypots and see how far people get.
Noise is a really underrated security layer.
Why stop there? Front the honeypot with a real IIS server, build a matryoshka doll of honeypots and see how far people get.