Report for IP: 3.131.220.121

Threat LevelMEDIUM45/1002 rule types across 2 attack categories
3 incidents on record · 2 rule types · confirmed on global blocklist · last seen 28d ago · known internet scanner
PTR scan.visionheight.com
Org / ASN AWS EC2 (us-east-2)
Country 🇺🇸 United States
City Columbus, Ohio
Timezone America/New_York
Internet Scannerscan.visionheight.com
The reverse DNS of this IP explicitly identifies it as a scanner. This host conducts systematic internet-wide probes. Unsolicited scanning is treated as hostile traffic on this network.

Attack Analysis

Geo-Blocked Country
This IP was blocked purely based on its country of origin — the site owner has restricted access from this IP's geographic location due to a pattern of unwanted traffic from that region. This does not necessarily mean the specific IP itself has attacked anything; it reflects a blanket country-level policy.
IDS: Threat Intel — CINS Active Threat
This IP appears in the CINS (Collective Intelligence Network Security) Active Threat Intelligence feed — a real-time blocklist of IPs with poor reputation scores derived from observed malicious activity. CINS-listed IPs are actively engaged in attacks at the time of detection.

Reports (3)

Date Severity Description
2 Sep 2026 - 07:34 high IDS: Threat Intel — CINS poor reputation IP
2 Sep 2026 - 07:34 high IDS: Threat Intel — CINS poor reputation IP — ET CINS Active Threat Intelligence Poor Reputation IP group 2
2 Sep 2026 - 07:33 low Geo Blocker — Country Match