nanog mailing list archives
Re: SentryPeer: A distributed peer to peer list of bad IP addresses and phone numbers collected via a SIP Honeypot
From: Eric Kuhnke <eric.kuhnke () gmail com>
Date: Wed, 24 Nov 2021 20:50:08 -0400
Anecdotally, anyone that's had reason to manually go through logs for port 5060 SIP for any public facing ipv4 /32 will see the vast amounts of random "things" out there on the internet trying common extension password combos to register. It's been a large amount of background noise on the internet for a very log time now. On Wed, Nov 24, 2021 at 5:20 PM Gavin Henry <ghenry () suretec co uk> wrote:
Hi all, I hope you don't mind the post, but thought this might be of use and in the spirit of release early, release often I've done an alpha release: https://github.com/SentryPeer/SentryPeer There's a presentation too if you'd like to watch/read where I hope to go with this: https://blog.tadsummit.com/2021/11/17/sentrypeer/ Working on the API and web UI next, then the p2p part of it. Feel free to submit any feature requests or have a play :-) Thanks for reading and any feedback is welcome! -- Kind Regards, Gavin Henry.
Current thread:
- SentryPeer: A distributed peer to peer list of bad IP addresses and phone numbers collected via a SIP Honeypot Gavin Henry (Nov 24)
- Re: SentryPeer: A distributed peer to peer list of bad IP addresses and phone numbers collected via a SIP Honeypot Eric Kuhnke (Nov 24)
- Re: SentryPeer: A distributed peer to peer list of bad IP addresses and phone numbers collected via a SIP Honeypot Max Tulyev (Nov 26)