Threat LevelMEDIUM41/1001 rule type
10 incidents · persistent 8-day campaign · last seen 4d ago
| PTR | ip31-70-77-230.pbiaas.com |
| Org / ASN | IONOS SE |
| Country | 🇩🇪 Germany |
| City | Berlin, State of Berlin |
| Timezone | Europe/Berlin |
Attack Analysis
IDS: SIPVicious VoIP Scanner
SIPVicious is an automated tool that scans for SIP/VoIP infrastructure to harvest extension numbers and brute-force credentials. A successful scan enables toll fraud, eavesdropping, and unauthorized calls billed to the victim.
Reports (10)
| Date | Severity | Description |
|---|---|---|
| 25 Sep 2026 - 22:55 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan |
| 25 Sep 2026 - 22:55 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 25 Sep 2026 - 14:53 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan |
| 24 Sep 2026 - 14:26 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan |
| 24 Sep 2026 - 14:26 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 20 Sep 2026 - 17:26 | high | IDS: SIPVicious VoIP scanner |
| 20 Sep 2026 - 11:52 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan |
| 20 Sep 2026 - 11:52 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 17 Sep 2026 - 12:50 | medium | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious User-Agent Detected (friendly-scanner) |
| 17 Sep 2026 - 12:50 | high | IDS: SIPVicious VoIP scanner — ET SCAN Sipvicious Scan |
EagleEye Intelligence