IntrusionLabs IntrusionLabs / threat intelligence
  • Dashboard Threats Intelligence
  • Tools
  • Overview Scanner classification Confidence scoring Operator discovery Campaign detection Evidence provenance OSINT fusion Pivot surfaces Pipeline freshness
  • Blog
  • API
Sign in
  • Data
    • Dashboard
    • Threats
    • Intelligence
  • Tools
  • Methodology
    • Overview
    • Scanner classification
    • Confidence scoring
    • Operator discovery
    • Campaign detection
    • Evidence provenance
    • OSINT fusion
    • Pivot surfaces
    • Pipeline freshness
  • Blog
  • API
  • Sign in

Threat Intelligence Tools

Investigate IPs, networks, and campaigns using data from our global honeypot sensor network.

🌐

ASN Lookup

Explore autonomous systems. See which ASNs harbor the most threat activity and their geographic distribution.

Live
🖥

Subnet Scanner

Check entire subnets for known threat actors. Identify compromised ranges and hosting providers.

Live
📚

Bulk IP Lookup

Check up to 100 IPs at once against our threat intelligence database. Paste a list from SIEM alerts or logs.

Live
📈

Campaign Search

Search coordinated attack campaigns by pattern, geography, or time window.

Live
🔎

Threat Actor Search

Multi-dimensional search across threat actors by country, attack type, MITRE technique, and more.

Live
Terms Privacy Acceptable Use Research Sensors Takedown Subprocessors
IntrusionLabs by Opaque Research