Re: [asterisk-users] Asterisk brute force watcher (was FYI)

[J. Oquendo]

Steve Kennedy wrote:

On Thu, Apr 26, 2007 at 06:46:41AM -0400, J. Oquendo wrote:

Steve Totaro wrote:

I suspect that this will happen more and more.  I also suspect that many
people who have weak SIP credentials like user=100 secret=100 will be
the victim of toll fraud and worse, call to 900 and other very high
termination rates.  How does $25 per minute sound?

Ashtray is an Asterisk brute force watcher. Checks logs from cron and emails admin of potential brute forcers

http://www.infiltrated.net/scripts/ashtray

Can have it set in .bash_profile so whenever you log on, you'd see anomalies.

With FC5 had to change to $8 and $11


Steve

Weird...

uname -a


I didn't

--
====================================================
J. Oquendo
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743

"Wise men talk because they have something to say;
fools, because they have to say something." -- Plato

Linux linuxbox 2.6.15-1.2054_FC5 #1 Tue Mar 14 15:48:33 EST 2006 i686 i686 i386 GNU/Linux echo infiltrated.net|sed 's/^/sil@/g'

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users