Artillery: Powefull Linux Protection tool

SUPERIOR · Oct 19, 2011

Artillery is a combination of a honeypot, file monitoring and integrity, alerting, and brute force prevention tool. It is light weight, has multiple different methods for detecting specific attacks and eventually will also notify you of insecure nix configurations. Artillery is coded in python.

How does Artillery works

As per above example If anyone decides to port scan or touch those ports, they are blacklisted immediately and permanently. It’s multi-threaded and can handle as many connections thrown at it. Author did some testing on his own site. And results where amazing. In the first 3 days, it blocked over 387 individuals.

In addition to the monitoring, it will also monitor file integrity leveraging sha-512 database where it keeps track of all system files and if anything changes, will email you with the change. By default it monitors /etc/ and /var/www. Artillery also monitors the SSH logs, and the event of a brute force attack, blacklists the host forever.
Click to expand...

download
svn co http://svn.secmaniac.com/artillery artillery/
http://www.secmaniac.com/download/

J_L · Oct 21, 2011

Imagine running that. Has anyone done so?

Mrkvonic · Oct 22, 2011

That sounds like a great plugin for social networks.
It blocked 387 people in 3 days, that's good! You can quickly block everyone.
Mrk

x942 · Oct 22, 2011

Could you use this on a home PC? I was recently hit by a series of DDOS attacks and this seems like it would have been nice to have.

Log in or Sign up

Artillery: Powefull Linux Protection tool

SUPERIOR Registered Member

J_L Registered Member

Mrkvonic Linux Systems Expert

x942 Guest

Log in or Sign up

Artillery: Powefull Linux Protection tool

SUPERIOR Registered Member

J_L Registered Member

Mrkvonic Linux Systems Expert

x942 Guest

Useful Searches