The Art of Defense

Finding Honeypots in Exchange-Dataset

While watching the output ofvulnerable exchange-hosts floating by i noticed a lot of odd ports in some

scan

$ grep -v "|443|" ms_exchange_dataset.ips.ports | grep -v "|80|" | grep -v "|465|" | grep -v "|993|"  > honeypots

$ wc -l honeypots 
4646 honeypots




Fragen? Kontakt: info@zero.bs
Filed: Tue 16 March 2010 | Analysis | Tags: honeypot exchange easteregg



Main-Links

  • zeroBS Home
  • Imprint / Contact
  • AGB
  • PGP-Keys
  • Report a Bug
  • zeroBS @ Twitter
  • zeroBS @ XING

Blog

  • Blog-Index
  • Security Bulletins
  • zeroBS-News
  • DDoS-Blogs
  • Security-Blogs
  • Botnet-Blogs

OSS & Projects

  • Botnetz-Monitoring und Tracking
  • DDoS Resiliency Score
  • Spike, Naxsi Rules Builder



(c) copyright 2017-2023 zeroBS GmbH, all rights reserved
info@zero.bs