Report for IP: 200.24.154.197

Threat LevelMEDIUM31/1001 rule type
9 incidents on record Β· active over 5 days Β· last seen 27d ago
PTR 197-154-24-200.ufinetlatam.net.ec
Org / ASN Negocios Y Telefonia Nedetel S.A
Country πŸ‡ͺπŸ‡¨ Ecuador
City Portoviejo, ManabΓ­
Timezone America/Guayaquil

Attack Analysis

IDS: SIPVicious VoIP Scanner
SIPVicious is an automated tool that scans for SIP/VoIP infrastructure to harvest extension numbers and brute-force credentials. A successful scan enables toll fraud, eavesdropping, and unauthorized calls billed to the victim.

Reports (9)

Date Severity Description
3 Sep 2026 - 10:51 medium IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
2 Sep 2026 - 08:52 high IDS: SIPVicious VoIP scanner
2 Sep 2026 - 06:08 medium IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
1 Sep 2026 - 22:23 medium IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious Scan
1 Sep 2026 - 22:23 medium IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
30 Aug 2026 - 14:59 medium IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious Scan
30 Aug 2026 - 14:59 medium IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
29 Aug 2026 - 01:32 high IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious Scan
29 Aug 2026 - 01:32 medium IDS: SIPVicious VoIP scanner β€” ET SCAN Sipvicious User-Agent Detected (friendly-scanner)