hello,<div><br></div><div>I to would like to get a list. I have several ips i can give you from attacks we have gotten over the last month or so. unfortunately i would not be able to get them to you within the next 12 hours. <br>
<br><div class="gmail_quote">On Wed, Oct 12, 2011 at 2:02 PM, Steve Cohen <span dir="ltr"><<a href="mailto:crazycohen@gmail.com">crazycohen@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Hi:<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Please send me a copy of your list. We will block those IP addresses. Also send me any information you have on how to block hacker programs used in Asterisk.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Warm Regards,<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Steve<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt"> <a href="mailto:asterisk-security-bounces@lists.digium.com" target="_blank">asterisk-security-bounces@lists.digium.com</a> [mailto:<a href="mailto:asterisk-security-bounces@lists.digium.com" target="_blank">asterisk-security-bounces@lists.digium.com</a>] <b>On Behalf Of </b>Jack Honey Pot<br>
<b>Sent:</b> Wednesday, October 12, 2011 10:51 AM<br><b>To:</b> <a href="mailto:asterisk-security@lists.digium.com" target="_blank">asterisk-security@lists.digium.com</a><br><b>Subject:</b> [asterisk-security] Honeypot Project<u></u><u></u></span></p>
</div><div><div></div><div class="h5"><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Hi All,<br><br>I'm not the first to try to start a VOIP blacklist but currently working on a project for the next 12 hours, hopefully I can get it up soon. What I intend to do is to work with a few reliable Harvester to gather the logs. A simple script to parse it then extract the list of attackers IP, compile them and send them out to the list.<br>
<br>If any of you are kind enough to zip and send me a /var/log/asterisk/messages that contain hacker's scan & attack, it will be helpful to my research. Do email me at <a href="mailto:jack@asteriskhoneypot.com" target="_blank">jack@asteriskhoneypot.com</a> . Let me know if you are keen to be a harvester as well.Thanks.<br>
<br>Regards,<br>Jackster <u></u><u></u></p></div></div><div class="MsoNormal" align="center" style="text-align:center"><hr size="1" width="100%" noshade style="color:gray" align="center"></div><p>No virus found in this message.<br>
Checked by AVG - <a href="http://www.avg.com" target="_blank">www.avg.com</a><br>Version: 10.0.1410 / Virus Database: 1522/3948 - Release Date: 10/12/11<u></u><u></u></p></div></div><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-security mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-security" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-security</a><br></blockquote></div><br></div>