Report for IP: 172.110.223.87

Threat LevelHIGH54/1002 rule types across 2 attack categories
12 incidents · 2 rule types · confirmed on global blocklist · persistent 16-day campaign · last seen 8d ago
PTR N/A
Org / ASN Dedires LLC
Country 🇭🇰 Hong Kong
City Hong Kong, Kowloon
Timezone Asia/Hong_Kong

Attack Analysis

IDS: SIPVicious VoIP Scanner
SIPVicious is an automated tool that scans for SIP/VoIP infrastructure to harvest extension numbers and brute-force credentials. A successful scan enables toll fraud, eavesdropping, and unauthorized calls billed to the victim.
IDS: Blocklist — Dshield
This IP was reported to the DShield community blocklist by multiple independent security sensors worldwide. DShield aggregates firewall logs from thousands of contributors; IPs on this list are confirmed active attackers observed across many networks.

Reports (12)

Date Severity Description
21 Sep 2026 - 13:20 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan
21 Sep 2026 - 13:20 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
20 Sep 2026 - 06:33 high IDS: SIPVicious VoIP scanner
20 Sep 2026 - 00:05 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
20 Sep 2026 - 00:05 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan
11 Sep 2026 - 04:36 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan
11 Sep 2026 - 04:36 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
7 Sep 2026 - 13:10 high IDS: Blocklist — Dshield listed IP
7 Sep 2026 - 12:11 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan
7 Sep 2026 - 12:11 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
5 Sep 2026 - 14:59 medium IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan
5 Sep 2026 - 14:59 high IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner)