Honeypots mailing list archives

RE: Does it really take so long to get a bite?


From: Michael Owen <mowen () costco com>
Date: Tue, 10 Dec 2002 09:32:04 -0800

What about Sparc hackers? Do they exist? I ran a Sparcstation honeypot
for awhile and had the odd x86 exploit thrown at it but never
compromised. I have heard stories of Sparc honeypots up for years w/o
being hacked.


I had a Sparc sun4m box running linux, and without being patched, it wasn't
rooted in years. I ended up giving up and pulling it, but as far as I can
tell, no one ever managed to guess the OS/arch of the box. 

Unless you want to get a specific person/group/knowledge set, you're better
off putting a common box out there (ie RedHat 7.2/Solaris 8/Windows2k), and
just watch what comes in. 

Michael

(My comments are my own, and not representative of the company I work for)


Current thread: