Re: Honeypot/net IDS System

["Ian Baker" <ibaker () codecutters org>]

----- Original Message ----- 
> I'm puzzled by everyone's interest in "fake honeypot" systems. I've run a
> couple of them for several years and there is almost NO traffic even
> though I have a bunch of email addy's on web pages for spamscrapers to
> find.

Ah. But are they on sites that people are likely to find?

Even with my modest site, I had the first honeytoken () codecutters org message
within 24 hours.

Of the 16,722 messages rejected by the SMTP server/honeypot, a full 7,804
have been to the two honeypot addresses. Of these, 144 messages were stopped
*only* because of the address (which is basically the purpose of the
honeypot, along with keeping the filters up-to-date!)

All of this would be fairly pointless if the bot isn't fooled into taking
the bait... ;o)

Regards,

Ian Baker
Webmaster, codecutters.org