Honeypots mailing list archives

Re: Does it really take so long to get a bite?


From: Anton Chuvakin <anton () chuvakin org>
Date: Tue, 10 Dec 2002 10:26:24 -0500 (EST)

Thomas and all,

maybe to use .edu, .com, .net etc as a general base for comparison and
describe the honeypots in words, not adresses?
Well, .com is just too big. That's not to granula. I can say (without even
looking at my log data :-)) that .com honeypots are probably hacked most
often...

I think IP range matters more than the name, due to automated tools used.
etc.

example:
10% of honeypots under .net was compromised < 24hrs
5% of european company honeypots was compromised < 24hrs
        north american universities
        european universites

Best,
-- 
  Anton A. Chuvakin, Ph.D., GCIA
     http://www.chuvakin.org
   http://www.info-secure.org


Current thread: