Anyone running a Production Honeypot?

[WeekendOC]

Ok this might be an odd request but I am currently doing my dissertation and looking to see if I can gather any ‘real’ production honeypot data from a live network.

I have my own honeynet running and got some data myself but to be more precise I have a research honeypot and would like some data from a real world environment.

Does anyone here have a honeynet or honeypot server at work logging unauthorised access attempts etc?
If so could I get a copy of the log files? – I understand that the IP addresses/hostnames will have to be removed as the data would be coming from a read life network.

I am not too confident in getting any data this way, but no harm in asking

- Will wait and see if anyone can help me out before posting my email address or msn/icq/skype.

Cheers

 

[WeekendOC]

Thanks for both of your replies.

morfmedia - I did send an email to the Honeynet project but as of yet had no reply.

IronFire - Yeah I might do that, but I was after more of a 'real' environment for my work. - Still I appreciate the suggestion.

Thanks again guys.

 

[WeekendOC]

hehe thanks morfmedia.

I got a reply form the HoneyNet project team but they area unable to help me as it goes against one of their policies, which I can understand.

 

[WeekendOC]

wasc - I am after as much info as possible... log files I guess are what I am after most but I would need to know what OS the honeypot was running on, if the honeypot was in a DMZ and if the OS was fully patched or not.

I mentioned in my first post that I am more than happy to receive log files which have had the IP addresses removed - I am guessing your work place would not be happy to release information on their network addressing.

Thanks for any help!