Report for IP: 158.101.16.205

Threat LevelMEDIUM24/1001 rule type
2 incidents on record · last seen 31d ago
PTR N/A
Org / ASN Oracle Cloud Infrastructure (us-phoenix-1)
Country 🇺🇸 United States
City Phoenix, Arizona
Timezone America/Phoenix

Attack Analysis

🇺🇸 United States · Phoenix · 31898 · Oracle Public Cloud
IDS: SIPVicious VoIP Scanner
SIPVicious is an automated tool that scans for SIP/VoIP infrastructure to harvest extension numbers and brute-force credentials. A successful scan enables toll fraud, eavesdropping, and unauthorized calls billed to the victim.

Reports (2)

Date Severity Description
30 Jun 2026 - 12:34 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
30 Jun 2026 - 12:34 high IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan