Patrick,
I observed this same behavior on a system a few weeks ago. If Asterisk
was not running, the CPU load would be normal. There were no 'failed'
attempts in any of the logs. There was a relatively large amount of
bandwidth coming from a specific IP address. (I used iftop to determine
Dear asterisk users,
A few weeks ago I've been attacked by a DOS on REGISTER that I've
solved with a fail2ban script.
Now, since a few hours, I have my asterisk 1.4.21.2 running at 100% CPU again.
I've checked the log and it shows nothing related to failed register
or whatever. It just tells me
I also forgot to add that my bandwidth is highly used (mostly out
traffic) since I've detected the attack
On Wed, Nov 17, 2010 at 06:46, Patrick asterisk-us...@ict-synergy.be wrote:
Dear asterisk users,
A few weeks ago I've been attacked by a DOS on REGISTER that I've
solved with a fail2ban
Sounds like your box has been compromised. Check the running processes and lock
down remote ssh access to your server.
Thanks,
--Warren Selby, dCAP
On Nov 17, 2010, at 12:53 AM, Patrick asterisk-us...@ict-synergy.be wrote:
I also forgot to add that my bandwidth is highly used (mostly out
