Full Disclosure mailing list archives
Honeypot?
From: James Lay <jlay () slave-tothe-box net>
Date: Sat, 30 Aug 2008 11:25:36 -0600
So...one of the networks I monitor has this ip: 66.139.73.183 Doing netbios scans on it. A cursory inspection shows it as a win2003 box...that¹s WIDE open. Could this be a honeypot that¹s been compromised? Curious
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Honeypot? James Lay (Aug 30)
- Re: [inbox] Honeypot? Exibar (Aug 30)