[asterisk-users] Asterisk brute force watcher (was FYI)

J. Oquendo sil at infiltrated.net
Thu Apr 26 03:46:41 MST 2007


Steve Totaro wrote:
> I suspect that this will happen more and more.  I also suspect that many
> people who have weak SIP credentials like user=100 secret=100 will be
> the victim of toll fraud and worse, call to 900 and other very high
> termination rates.  How does $25 per minute sound?
>
> Thanks,
> Steve Totaro
> http://www.asteriskhelpdesk.com
> KB3OPB

Ashtray is an Asterisk brute force watcher. Checks logs from cron and 
emails admin of potential brute forcers
http://www.infiltrated.net/scripts/ashtray

Can have it set in .bash_profile so whenever you log on, you'd see 
anomalies.

-- 
====================================================
J. Oquendo
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743
echo infiltrated.net|sed 's/^/sil@/g' 

"Wise men talk because they have something to say;
fools, because they have to say something." -- Plato


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5157 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20070426/8d09bc37/smime.bin


More information about the asterisk-users mailing list