February 20, 2012 0

Project VoIP releasing soon

By in Honeypot

Well loads has been happening in the past week!

I managed to get another VoIP honeypot setup running and left them both running for close to a week. Well within that week both honeypots were hit 8 times! So after all it does look like people are still cracking VoIP networks :-)

The script I wrote only logged all the information to a text file but now I have it updating a MySQL database, uploading the packet captures and recordings as a BLOB. After thinking about it for a while I don’t think I will release the .CAP files on the project page because it will reveal the IP address of the honeypot, same goes for the traceroute. I will give these in the abuse report emails. I will think of ways I can edit the captures to replace the real IP of the honeypot with a fake one.

I am currently coding the project web page which I hope to have up and running by mid week if all goes well.

Leave a Reply