Intrusion Prevention

SIPVicious.SIP.Scanner

Description

This indicates detection of an attempted scan from SIPVicious Scanner.
SIPVicious is a SIP scanner. The signature detects for SIP requests from the scanner at a rate of 200 per second. The rate can be adjusted in the CLI or GUI to suit your needs.

Affected Products

SIP based VoIP systems

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
System Compromise: Remote attackers can gain access to the service provided by the vulnerable systems.

Recommended Actions

Monitor the traffic from that network for any suspicious activity.
Adjust the threshold for the signature accordingly.