Elevated Risk
IP 96.127.153.174 is a high-risk address operated by SingleHop LLC (AS32475) in the United States, assessed at threat level 8/10 with 90% confidence based on 291 total abuse reports submitted through automated honeypot sensors between January and May 2026. The dominant threat category linked to this IP is VoIP fraud, accounting for the most recent cluster of reported activity.
The abuse record for 96.127.153.174 spans approximately five months, indicating persistent rather than isolated malicious behavior. All 291 reports originate from automated honeypot detection infrastructure, giving the dataset a consistent methodological foundation. The activity frequency score of 8/10 signals that exploitation attempts from this address are not sporadic but follow a regular, sustained pattern. The IP's assignment within SingleHop LLC's infrastructure places it within a commercial hosting environment, which is a common vector for abuse due to the relative anonymity and scalability such providers offer to threat actors.
VoIP fraud exploitation involves the compromise or abuse of Voice over IP systems to initiate unauthorized calls, typically toward premium-rate or international numbers for financial gain. For organizations operating SIP endpoints, Session Border Controllers or open phone infrastructure, an IP with this abuse profile represents a direct risk of unauthorized toll fraud, bill shock and resource exhaustion. The sustained volume of reports suggests 96.127.153.174 has been systematically probing or actively abusing VoIP resources across multiple targets.
Site operators should block or rate-limit traffic from 96.127.153.174 at the network edge, enforce strong authentication on all SIP and VoIP management interfaces, and monitor call-detail records for anomalous patterns such as unexpected premium-rate or international destinations. Implementing call allow-listing for trusted prefixes and deploying defensive tools such as fail2ban to auto-block repeat offenders will reduce exposure. Ongoing monitoring of abuse feeds for this address is strongly recommended.
FR 
UA