php files on webserver

[dakta]

I been looking through my servers hit logs and certain people keep scanning for certain php files which i do not have (im assuming its in the hope of finding exploits etc). Is it worth putting false php documents in the location they keep scanning just to be tight an give em false hope?

cheers

 

[office politics]

i wouldn't. why would you want them to try to attack your box?

 

[dakta]

Maybe im a little crazy. It's my box. Anything goes.

 

[dakta]

nah seriously im just interested in any side effects that may result if they find the files theyr looking for but obviously wont be exploitable since theyr absolute fakes. Probably nothing but it sounded like fun at the time. Might even waste a few processing cycles of the attackers anyway.

 

[office politics]

i posted a honeypot tutorial in tf's tutorial forum

http://www.techist.com/showthread.php?s=&threadid=82392