full-disclosure-uk August 2008 archive
Main Archive Page > Month Archives  > full-disclosure-uk archives
full-disclosure-uk: [Full-disclosure] Honeypot?

[Full-disclosure] Honeypot?

From: James Lay <jlay_at_nospam>
Date: Sat Aug 30 2008 - 17:25:36 GMT
To: Full-disclosure <full-disclosure@lists.grok.org.uk>


So...one of the networks I monitor has this ip:

66.139.73.183

Doing netbios scans on it. A cursory inspection shows it as a win2003 box...thatıs WIDE open. Could this be a honeypot thatıs been compromised?

Curious



Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/