Is 3.21.231.196 malicious?
Checked against 1.5M+ indicators of compromise from honeypots, blocklists and OSINT feeds.
SUSPICIOUS
This indicator shows suspicious activity. Review related traffic.
Public Record
Type
ip
Country
US
First Seen
8 Jun 2026
Status
ACTIVE
Source
Binary Defense
honeypotmaliciousbinary-defense
Full report is free — sign in to unlock
Confidence score, last-seen date, abuse reports, open CVEs (Shodan), attack context and API access.