To expand ontokenizerrr's point, I read this as a big victory:
> First, the pedo site saw magnitudes more traffic than the counterfeiting or drugs websites – in the order of 100 times more traffic than the other two combined.
DNM users do not start at a random .onion because that is a recipe for being the latest victim of 'Drug Market' and other longstanding onion scams.
OP appears to have made no effort to get his honeypot into any of the standard sources of DNM info, and accordingly, he got no traffic. This is exactly as one would hope, and says more about how badly he bungled the drugs honeypot (and conversely, how pathetic the security of the pedo community is) than about any ratio of pedos to drug buyers.
(This is a similar problem as the paper which counts .onions and argues that pedophiles are 99% or whatever of hidden-service traffic; the differing communities using hidden-services simply don't work the way that OP or that paper assumed for ease of making wild claims. Counting onion addresses does not work because the pedo sites tend to change onions constantly while the huge blackmarkets like Agora stick at a single onion like agorahooawayyfoe.onion for months or years; counting visits to a lame honeypot like OP's does not work because with no advertising, vetting, or sellers, no one would bother with his honeypot when they could use Agora, Nucleus, Abraxas, or other established markets with broad offerings.)
> First, the pedo site saw magnitudes more traffic than the counterfeiting or drugs websites – in the order of 100 times more traffic than the other two combined.
When someone wants to use the DNMs, they start at http://deepdotweb.com/ , http://thehub7gqe43miyc.onion/ , http://darknetmarkets.reddit.com/ or http://www.gwern.net/Black-market%20survival ; these are curated community lists, which people use to avoid falling for phishing links and scams.
Just look at the traffic stats for the one subreddit: https://www.reddit.com/r/DarkNetMarkets/about/traffic/ !
DNM users do not start at a random .onion because that is a recipe for being the latest victim of 'Drug Market' and other longstanding onion scams.
OP appears to have made no effort to get his honeypot into any of the standard sources of DNM info, and accordingly, he got no traffic. This is exactly as one would hope, and says more about how badly he bungled the drugs honeypot (and conversely, how pathetic the security of the pedo community is) than about any ratio of pedos to drug buyers.
(This is a similar problem as the paper which counts .onions and argues that pedophiles are 99% or whatever of hidden-service traffic; the differing communities using hidden-services simply don't work the way that OP or that paper assumed for ease of making wild claims. Counting onion addresses does not work because the pedo sites tend to change onions constantly while the huge blackmarkets like Agora stick at a single onion like agorahooawayyfoe.onion for months or years; counting visits to a lame honeypot like OP's does not work because with no advertising, vetting, or sellers, no one would bother with his honeypot when they could use Agora, Nucleus, Abraxas, or other established markets with broad offerings.)