Honeypots mailing list archives

honeyd script files


From: andy spencer <andy.t.spencer () googlemail com>
Date: Thu, 3 Nov 2005 09:09:23 +0000

my son tried to send the following message, I'm repeating it on his behalf:

To whom it may concern,
I am currently trying to set up honeyd based on a Windows XP for a
college project, I
succeeded so far that my honeyd can see all connection requests,
showing port and IP [this wasn't that easy too, I needed a router and
the knowledge of my
father to come so far], but I am failing to find any port scripts for
ports that are being attacked.
I found out that 135(NET Bios), 445(CIFS), 1026 and 1027 (Microsoft scheduling
port ? and MSN messenger ?) are frequently scanned ports, but I
couldn't find any scripts
either by their port number or their function.
I hope you can help me to find some scripts.
I thank you in advance
Tim Spencer


Current thread: