Threat Actor Search
Query threat actors across multiple dimensions. Combine filters to find exactly what you're looking for.
Create an account to unlock advanced filters
Sign upResults
8
Top Countries
GB
8
Top Attack Types
http:scan
4
ssh:connection
4
telnet:connection
2
ssh:bruteforce
1
Flags
VPN
0
ASN DROP
0
Known Scanner
0
| IP Address | Behavior | Confidence | Flags | Events | Agents | Country | Hostname | Last Seen |
|---|---|---|---|---|---|---|---|---|
| 5.226.140.42 | scanner | 36% | 1x | 3 | 2 | GB | 5-226-140-42.infrawat.ch | 2026-10-03 21:30 |
| 5.226.140.4 | web_probe | 32% | 4 | 2 | GB | 5-226-140-4.infrawat.ch | 2026-10-04 11:25 | |
| 5.226.140.44 | web_probe | 23% | 6 | 1 | GB | 5-226-140-44.infrawat.ch | 2026-06-04 11:27 | |
| 5.226.140.41 | web_probe | 18% | 1x | 2 | 1 | GB | 5-226-140-41.infrawat.ch | 2026-08-20 05:12 |
| 5.226.140.48 | scanner | 18% | 1x | 8 | 1 | GB | 5-226-140-48.infrawat.ch | 2026-07-17 04:50 |
| 5.226.140.45 | scanner | 17% | 1x | 4 | 1 | GB | 5-226-140-45.infrawat.ch | 2026-10-02 16:16 |
| 5.226.140.46 | scanner | 17% | 1x | 4 | 1 | GB | 5-226-140-46.infrawat.ch | 2026-09-15 11:17 |
| 5.226.140.40 | ssh:bruteforce | 15% | 1x | 2 | 1 | GB | 5-226-140-40.infrawat.ch | 2026-07-04 04:27 |
Export requires an account
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
SCAN Known legitimate scanner
Nx Corroborated by N external threat feeds