Full Disclosure mailing list archives

Honeypot?


From: James Lay <jlay () slave-tothe-box net>
Date: Sat, 30 Aug 2008 11:25:36 -0600

So...one of the networks I monitor has this ip:

66.139.73.183

Doing netbios scans on it.  A cursory inspection shows it as a win2003
box...that¹s WIDE open.  Could this be a honeypot that¹s been compromised?

Curious
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: