Threat LevelMEDIUM33/1001 rule type
8 incidents on record · persistent 11-day campaign · last seen 22d ago
| PTR | vmi3352043.contaboserver.net |
| Org / ASN | Contabo GmbH |
| Country | 🇫🇷 France |
| City | Lauterbourg, Grand Est |
| Timezone | Europe/Paris |
Attack Analysis
IDS: SIPVicious VoIP Scanner
SIPVicious is an automated tool that scans for SIP/VoIP infrastructure to harvest extension numbers and brute-force credentials. A successful scan enables toll fraud, eavesdropping, and unauthorized calls billed to the victim.
Reports (8)
| Date | Severity | Description |
|---|---|---|
| 14 Oct 2026 - 22:11 | high | IDS: SIPVicious VoIP scanner |
| 14 Oct 2026 - 22:11 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 14 Oct 2026 - 10:05 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan |
| 14 Oct 2026 - 10:05 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 3 Oct 2026 - 16:18 | high | IDS: SIPVicious VoIP scanner |
| 3 Oct 2026 - 16:18 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 3 Oct 2026 - 10:21 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 3 Oct 2026 - 10:21 | high | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan |
EagleEye Intelligence