[VOIPSEC] Mass scan in search of Open SIP devices for Telephone fraud?

[Fabio Pietrosanti (naif)]

Hi all,

does anyone has informations on telephone fraud conducted by mass 
scanning internet ip addresses space?

I got several SIP mass scan on my networks and i expect them being part 
of some wider mass scan.

The question is: why they are doing mass SIP scan? How they conduct the 
fraud? There are any case regarding this? How concrete is the risk of 
having open sip devices in the internet?


Fabio Pietrosanti