CUBE prints untrusted-request syslogs to the console every 60 minutes once a threshold of 1000 SIP requests is passed.

Checked 2026-09-25

Syslogs are printed on the device console every 60 minutes after 1000 SIP requests threshold
Vendor
Cisco
Product
Cisco Unified Border Element (CUBE)
Subsystem
TDoS Attack Mitigation logging
Deployment
on-premises
Region
not restricted
Release range
Cisco IOS XE 17.6 onwards
Checked
2026-09-25

Sources

Cite this note

APA

WarmTransfer. (2026, September 25). SIP scanning and telephony denial of service: source note sip-scanning-tdos-cube-untrusted-syslog. WarmTransfer. https://warmtransfer.net/knowledge/claims/sip-scanning-tdos-cube-untrusted-syslog

BibTeX

@misc{warmtransfer-claim-sip-scanning-tdos-cube-untrusted-syslog,
  title  = {SIP scanning and telephony denial of service: source note sip-scanning-tdos-cube-untrusted-syslog},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/sip-scanning-tdos-cube-untrusted-syslog},
  note   = {Source note sip-scanning-tdos-cube-untrusted-syslog, checked 2026-09-25}
}

Read in context