ET VOIP Possible Inbound VOIP Scan/Misuse With User-Agent Zoiper

SID: 2012297Rev: 22 views
History
Sourceet/open
CreatedFebruary 7, 2011
UpdatedJuly 26, 2019
Classificationattempted-recon
alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP Possible Inbound VOIP Scan/Misuse With User-Agent Zoiper"; content:"|0d 0a|User-Agent|3A| Zoiper"; nocase; threshold:type limit, count 1, seconds 60, track by_src; reference:url,blog.sipvicious.org/2010/12/11-million-euro-loss-in-voip-fraud-and.html; classtype:attempted-recon; sid:2012297; rev:2; metadata:created_at 2011_02_07, confidence Medium, signature_severity Informational, updated_at 2019_07_26;)

References

urlblog.sipvicious.org/2010/12/11-million-euro-loss-in-voip-fraud-and.html

Metadata

created at2011_02_07
confidenceMedium
signature severityInformational
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!