Threat Actor Search

Query threat actors across multiple dimensions. Combine filters to find exactly what you're looking for.

Create an account to unlock advanced filters

Sign up
Results
8
Top Countries
GB 8
Top Attack Types
ssh:connection 5
http:scan 2
telnet:connection 2
telnet:bruteforce 1
Flags
VPN 0
ASN DROP 0
Known Scanner 0
IP Address Behavior Confidence Flags Events Agents Country Hostname Last Seen
5.226.140.7 web_probe 37% 1x 6 2 GB 5-226-140-7.infrawat.ch 2026-09-17 15:38
5.226.140.77 scanner 37% 1x 5 2 GB 5-226-140-77.infrawat.ch 2026-10-10 04:30
5.226.140.76 scanner 18% 4 1 GB 5-226-140-76.infrawat.ch 2026-10-20 03:18
5.226.140.73 scanner 17% 1x 6 1 GB 5-226-140-73.infrawat.ch 2026-10-12 03:07
5.226.140.70 scanner 17% 1x 4 1 GB 5-226-140-70.infrawat.ch 2026-05-22 05:46
5.226.140.75 scanner 16% 1x 2 1 GB 5-226-140-75.infrawat.ch 2026-09-26 09:41
5.226.140.72 scanner 16% 1x 2 1 GB 5-226-140-72.infrawat.ch 2026-10-10 23:29
5.226.140.74 telnet:bruteforce 15% 1x 3 1 GB 5-226-140-74.infrawat.ch 2026-10-14 11:26
Export requires an account
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
SCAN Known legitimate scanner
Nx Corroborated by N external threat feeds