Honeypots: Re: Does it really take so long to get a bite?

[Anton Chuvakin <anton () chuvakin org>]

Thomas and all,

> maybe to use .edu, .com, .net etc as a general base for comparison and
> describe the honeypots in words, not adresses?
Well, .com is just too big. That's not to granula. I can say (without even
looking at my log data :-)) that .com honeypots are probably hacked most
often...

I think IP range matters more than the name, due to automated tools used.
etc.

> example:
> 10% of honeypots under .net was compromised < 24hrs
> 5% of european company honeypots was compromised < 24hrs
>         north american universities
>         european universites
Best,
-- 
  Anton A. Chuvakin, Ph.D., GCIA
     http://www.chuvakin.org
   http://www.info-secure.org