Intrusion PreventionSIPVicious.SIP.Scanner
Description
This indicates detection of an attempted scan from SIPVicious Scanner.
SIPVicious is a SIP scanner. The signature detects for SIP requests from the scanner at a rate of 200 per second. The rate can be adjusted in the CLI or GUI to suit your needs.
Affected Products
SIP based VoIP systems
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
System Compromise: Remote attackers can gain access to the service provided by the vulnerable systems.
Recommended Actions
Monitor the traffic from that network for any suspicious activity.
Adjust the threshold for the signature accordingly.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-04-03 | 14.585 | Sig Added |
| ID | 40674 |
| Created | Jun 25, 2015 |
| Updated | Apr 02, 2019 |
| Risk |
|
| Default Action | pass |
| Active | |
| Affected OS | All |
| Affected App | Other |