Monday, March 16, 2009

[asterisk-biz] PBX Hacker IP List

Hi All,
 
I would like to pool our resources and start an IP list of known PBX Hackers.  As a US service provider I get hit pretty often with bots trying brute force username/password attacks, mostly coming form overseas.  I had several attacks this weekend and it got me thinking about a list that could benefit the community.  There was a great discussion about Asterisk security on the "PBX Got Hacked" thread over the past couple of weeks and someone did mention this type of list.
 
I do not want to re-invent the wheel, is there such a list already established that I may contribute to?  If not, I would not mind hosting a list on my website.  I know there will be some particulars to be worked out, list format, qualifying list entries, how the list will be updated, removing entries, and items I haven't thought about.
 
Are there any legal pitfalls with hosting such a list?
 
Your feedback and discussion is appreciated.
 
Thanks.
 
JR
--
JR Richardson
Engineering for the Masses

No comments: