[Freeswitch-users] Fwd: [asterisk-users] VoIP Abuse to Twitter (real time VoIP Abuse)

[vip killa]

---------- Forwarded message ----------
From: Robert Huddleston <rhuddleston at gmail.com>
Date: Thu, Sep 22, 2011 at 11:10 AM
Subject: Re: [asterisk-users] VoIP Abuse to Twitter (real time VoIP Abuse)
To: Asterisk Users Mailing List - Non-Commercial Discussion <
asterisk-users at lists.digium.com>


Sounds like a great idea.. Hopefully the page/account never gets hacked and
bad IP’s published.. I could see a great hack of ****

127.0.0.1  ****

192.168.0.0/16 ****

10.0.0.0/8 ****

getting up there somehow and next thing you know – BAM!****

** **

But I haven’t RTFM – I’m guessing there is probably a white list that
supersedes the naughty list.****

** **

** **

*From:* asterisk-users-bounces at lists.digium.com [mailto:
asterisk-users-bounces at lists.digium.com] *On Behalf Of *vip killa
*Sent:* Thursday, September 22, 2011 11:06 AM
*To:* Asterisk Users Mailing List - Non-Commercial Discussion
*Subject:* Re: [asterisk-users] VoIP Abuse to Twitter (real time VoIP Abuse)
****

** **

very cool!****

On Thu, Sep 22, 2011 at 10:37 AM, J. Oquendo <asterisk at tormenting.net>
wrote:****


Apologies for cross posting but some of us aren't on the other list
(vice/versa) and thought both groups would benefit.

For those familiar with the VoIP Abuse Project, no need to explain the
gist of this. I got tired of parsing through the alerts (lists) I
receive via email daily. They're long and sometimes I don't have the
time to post them all. So for now, posting VoIP Abuse addresses straight
to Twitter.

So, anyone trying to compromise a pbx, is now autoposted on an hourly
basis to Twitter. Still working on pulling, have about 4 machines linked
up now, will mop em up during the week.

http://twitter.com/#!/voipabuse

Now, you can concoct a quick script off of it, e.g.:

links -dump "http://twitter.com/voipabuse"|awk '/attacker/{print
"iptables -A INPUT -s "$2" -j DROP"| "sort -u"}'

Will get a quickie soon from my Acme's, nCites, etc. when I have time.

For those NOT familiar with it, please Google it as I don't feel like
typing anymore ;) (sorry)



--

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM

"It takes 20 years to build a reputation and five minutes to
ruin it. If you think about that, you'll do things
differently." - Warren Buffett

42B0 5A53 6505 6638 44BB  3943 2BF7 D83F 210A 95AF
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users****

** **

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20110922/c5d21cfd/attachment-0001.html