Re: Does it really take so long to get a bite?

[Thomas Sjögren <thomas () northernsecurity net>]

On Monday 09 December 2002 16.35, Anton A. Chuvakin wrote:

>  The question
> is how to make the comparison without disclosing the honeypot IP
> address?

maybe to use .edu, .com, .net etc as a general base for comparison and 
describe the honeypots in words, not adresses?

example:
10% of honeypots under .net was compromised < 24hrs
5% of european company honeypots was compromised < 24hrs
          north american universities
          european universites

and so on

/Thomas
-- 
thomas () northernsecurity net
thomas () se linux org