Hi all, maybe some are not on that list but interessted in that area

Roger

-------- Original-Nachricht -------- Betreff: [VOIPSEC] Artemisa (an open-source VoIP honeypot) - Active Attackers needed Datum: Wed, 17 Oct 2012 16:22:06 -0300 Von: Artemisa Notifications artemisa.notifications@gmail.com An: voipsec@voipsa.org

Dear VoIP enthusiasts and Community members,

We're writing in order to invite you all to participate in a research open-source project, we've been working in since the beginning of this year. This project is sponsored by the Science* and Technology Government Department & Blas Pascal University, both organizations from Córdoba province, Argentina.*

The link to the project: http://artemisa.sourceforge.net/ . Our work is related to an open source honeypot, named Artemisa, for VoIP networks deploying the SIP protocol. We'll really appreciate the participation of anyone that has interest to play the *attacker's role*, if possible concentrating in the VoIP service we are exposing. So as to let us capture relevant information related with real attacks. As a result, we'll be able to do an analysis of the efficiency of the platform. Furthermore, a statistical analysis, of all the received attacks, will be performed.

*Target sip extensions:*

*1) **sip: sip%3Aubp1@iptel.orgubp1@iptel.org **or **sip:sip%3A229049@iptel.org 229049@iptel.org** **(Public Free ext)*

*2)** **sip: sip%3Aubp2@iptel.orgubp2@iptel.org **or **sip:sip%3A229056@iptel.org 229056@iptel.org** **(Public Free ext)*

*3)** **sip: sip%3A2xxx@ubpsipserver.myvnc.com2xxx@ubpsipserver.myvnc.com* * **(SER)*

*4)** **sip: sip%3Ametropolitan1@iptel.orgmetropolitan1@iptel.org **or ** sip: sip%3A229061@iptel.org229061@iptel.org** **(Public Free ext)*

*5)** **sip: sip%3Ametropolitan2@iptel.orgmetropolitan2@iptel.org **or ** sip: sip%3A229063@iptel.org229063@iptel.org** **(Public Free ext)*

*6)** **sip: sip%3A1xxx@asteriskserver.myvnc.com 1xxx@asteriskserver.myvnc.com** **(Asterisk)*

*7)** **sip:2xxx@asteriskserver.myvnc.com:5061** **(SER)*

*8)** **sip: sip%3A1xxx@asterisksipserver.myvnc.com 1xxx@asterisksipserver.myvnc.com** **(Asterisk)*

We briefly give you a description of the honeypot:

Artemisa is a VoIP/SIP-specific honeypot software designed to connect to a VoIP enterprise domain as a user-agent back-end in order to detect malicious activity at an early stage. It registers mu tiple SIP accounts, which do not represent real human subscribers, at one or more VoIP service providers, and wait for incoming attacks. Besides, Artemisa can play a role in the real-time adjustment of the security policies of the enterprise domain where it is deployed (e.g. setting rules in a firewall to ban IPs or in the VoIP PBX to ban caller-IDs).

Thanks for your time, hope you'll actively participate (attack!) the sip extension presented above.

To contact us: artemisa.notifications@gmail.com

Best regards,

Exequiel Barrirero / Mauro Villarroel.- _______________________________________________ Voipsec mailing list Voipsec@voipsa.org http://voipsa.org/mailman/listinfo/voipsec_voipsa.org