Significant Threat
IP 172.110.223.161 is a moderate-to-high risk address originating from the Philippines that has generated 371 abuse reports, with the dominant threat category being VoIP fraud. This IP presents a 7/10 threat level with a 91% confidence score and an activity frequency rated 8/10, indicating sustained malicious behavior rather than an isolated incident.
The IP was first reported in May 2026 and most recently reported in May 2026, suggesting concentrated malicious activity within a narrow timeframe. All 20 report sources were attributed to automated honeypot sensors, confirming systematic probing activity. The address is allocated to ASN AS47154 under the network operator Husam A. H. Hijazi, which provides the geographic and organizational context for this threat actor.
VoIP fraud exploits voice over IP infrastructure to route unauthorized calls, typically to premium-rate numbers for financial gain. An IP engaged in this activity may be scanning for vulnerable SIP proxies, testing stolen credentials against VoIP platforms, or directly routing fraudulent calls through compromised telephony systems. The 371 total reports with Fraud VoIP as the leading category indicate persistent exploitation attempts that could translate to significant financial losses if successful.
Site operators should implement call authentication protocols such as STIR/SHAKEN to verify caller identity, monitor call records for unusual premium-rate or international dialing patterns, and restrict or flag high-cost destination numbers. Blocking or rate-limiting traffic from this IP, combined with proactive monitoring of authentication logs for credential-stuffing patterns, provides layered defense against ongoing exploitation attempts.
HK 
UA