[Serusers] Strange "sip scans" from "qualsys.com"

Arnd Vehling av at nethead.de
Mon Feb 9 08:45:48 CET 2004


while strolling through my sip server logile ive came accross some 
strange unauthorized sip messages originating from "scan.qualsys.net":
(ip address has been logged to)

OPTIONS sip:scan.qualys.com SIP/2.0
Via: SIP/2.0/UDP scan.qualys.com:5060;branch=z9hG4bKnashds7
Max-Forwards: 70
To: Foo <sip:foo at scan.qualys.com>
From: Foo <sip:foo at scan.qualys.com>;tag=456248
Call-ID: 843817637684230 at 998sdasdh09
CSeq: 1826 OPTIONS
Accept: application/sdp
Content-Length: 0

These packets could be found in ALL our SIP Proxy logs and they
are clearly unauthorized.

Has anyone a idea what this could be about or found similiar
sip messages in his log?

-- Arnd

More information about the sr-users mailing list