Critical Threat
IP 114.31.75.24 is a high-risk threat source registered to 5G Network Operations Pty Ltd in Australia that has generated 593 abuse reports since May 2026, representing a critical danger to any exposed internet-facing services due to sustained and aggressive hacking activity detected across multiple automated honeypot sensors.
With a confidence score of 94% and an activity frequency rating of 8 out of 10, IP 114.31.75.24 operating through AS24446 demonstrates persistent malicious behavior concentrated within the hacking threat category during the May-June 2026 reporting window. The detection footprint spans 20 separate automated honeypot reports, indicating systematic probing of target systems from this single Australian source address. Network-layer analysis reveals Suricata alerts documenting outbound ICMP communications where the destination host explicitly rejected administrative contact, a pattern consistent with coordinated vulnerability scanning and network reconnaissance operations.
The hacking classification encompasses diverse intrusion methodologies including exploitation attempts against vulnerable services, credential brute-forcing, and unauthorized access vectors. This IP reputation data suggests the address is actively employed in automated campaigns scanning the internet for exploitable entry points rather than conducting highly targeted operations. The sustained volume of reports over a compressed timeframe indicates infrastructure continuously reused for hostile reconnaissance, creating ongoing exposure risk for any organization with poorly secured or unpatched internet-facing systems.
Network defenders should immediately block this IP at the firewall level and implement automated blocking solutions such as fail2ban to prevent repeated connection attempts. Organizations should enforce strong authentication controls on all remote access services, particularly enforcing multi-factor authentication for administrative interfaces and changing default credentials. Continuous monitoring of honeypot telemetry and threat intelligence feeds will help correlate this activity with broader campaign patterns. Regular vulnerability scanning and prompt patching of internet-facing systems remain essential to reduce the attack surface that addresses like 114.31.75.24 actively exploit.
PL 
HK 
RO 
BG 
PS 
SG