VOIP: ET SCAN Modified Sipvicious User-Agent Detected
This signature detects reconnaissance attacks done by attacker using sipvicious on remote VOIP servers. A successful attack can lead to information disclosure and authentication bypass.
References
URL: https://blog.kolmisoft.com/sip-attack-friendly-scanner/
Short Name
VOIP:SIP:SIPVICIOUS-UAD
Severity
Minor
Recommended
False
Recommended Action
None
Category
VOIP
Keywords
Detected ET Modified SCAN Sipvicious User-Agent
Release Date
10/08/2024
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3747
False Positive
Unknown