<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="blue">
<div class="Section1">
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:
10.0pt;font-family:Arial;color:navy">Why not just get yourself an SBC that will do the job of banning IPs that send you more than x request in y minutes…<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:
10.0pt;font-family:Arial;color:navy"><o:p> </o:p></span></font></p>
<div>
<p class="MsoNormal"><font size="3" color="navy" face="Times New Roman"><span style="font-size:12.0pt;color:navy"> <o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span lang="FR-CA" style="font-size:10.0pt;font-family:Arial;color:navy">Vincent Dubois<br>
B2B2C Inc.<br>
T. 514.908.5420 x379</span></font><span lang="FR-CA"><o:p></o:p></span></p>
</div>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><font size="3" face="Times New Roman"><span lang="FR" style="font-size:12.0pt">
<hr size="2" width="100%" align="center" tabindex="-1">
</span></font></div>
<p class="MsoNormal"><b><font size="2" face="Tahoma"><span lang="FR" style="font-size:
10.0pt;font-family:Tahoma;font-weight:bold">De :</span></font></b><font size="2" face="Tahoma"><span lang="FR" style="font-size:10.0pt;font-family:Tahoma"> asterisk-security-bounces@lists.digium.com
[mailto:asterisk-security-bounces@lists.digium.com] <b><span style="font-weight:
bold">De la part de</span></b> Jack Honey Pot<br>
<b><span style="font-weight:bold">Envoyé :</span></b> 12 octobre 2011 13:51<br>
<b><span style="font-weight:bold">À :</span></b> asterisk-security@lists.digium.com<br>
<b><span style="font-weight:bold">Objet :</span></b> [asterisk-security] Honeypot Project</span></font><span lang="FR"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:
12.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:
12.0pt">Hi All,<br>
<br>
I'm not the first to try to start a VOIP blacklist but currently working on a project for the next 12 hours, hopefully I can get it up soon. What I intend to do is to work with a few reliable Harvester to gather the logs. A simple script to parse it then extract
the list of attackers IP, compile them and send them out to the list.<br>
<br>
If any of you are kind enough to zip and send me a /var/log/asterisk/messages that contain hacker's scan & attack, it will be helpful to my research. Do email me at
<a href="mailto:jack@asteriskhoneypot.com">jack@asteriskhoneypot.com</a> . Let me know if you are keen to be a harvester as well.Thanks.<br>
<br>
Regards,<br>
Jackster <o:p></o:p></span></font></p>
</div>
</body>
</html>