iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
rDNS contains=scan.visionheight.com
9 unique IPs · 17.0K events · 1 countries · 1 ASNs
Activity · last 7d
peak 3.4K on 2026-06-18
Top source networks · click to refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 2049/NFS | GET / UA: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 14.1K · 9 IPs | 18.116.101.220 → |
| - | 2049/NFS | 0a | 2.4K · 9 IPs | 18.116.101.220 → |
| RDP | 3389/RDP | +&� Cookie: mstshash=zgrab | 40 · 9 IPs | 3.132.26.232 → |
| Redis | 6379/Redis | *1 $4 QUIT | 34 · 6 IPs | 18.116.101.220 → |
| Redis | 6379/Redis | *1 $4 PING | 34 · 6 IPs | 18.116.101.220 → |
| Redis | 6379/Redis | *1 $4 INFO | 34 · 6 IPs | 18.116.101.220 → |
| Redis | 6379/Redis | *1 $11 NONEXISTENT | 34 · 6 IPs | 18.116.101.220 → |
| - | 502 | ZG + | 30 · 7 IPs | 16.58.56.214 → |
| - | 1521/Oracle | m 8, A �� 3 : AA (DESCRIPTION=(CONNECT_DATA=(CID=(PROGRAM=zgrab2)))) | 26 · 6 IPs | 3.130.168.2 → |
| - | 27017/MongoDB | 3a 00 00 00 00 00 00 00 00 00 00 00 d4 07 00 00 00 00 00 00 61 64 6d 69 …(58 bytes) | 25 · 5 IPs | 3.134.216.108 → |
| HTTP | 631/IPP | POST /ipp UA: Mozilla/5.0 zgrab/0.x | 23 · 7 IPs | 3.132.26.232 → |
| - | 445/SMB | 00 00 00 66 fe 53 4d 42 40 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 …(106 bytes) | 22 · 7 IPs | 3.131.220.121 → |
IPCountryASNTop portsEvents