Attacker Intelligence
IPs observed targeting KEVIntel sensors, mapped to exploited CVEs.
61
Unique Attacker IPs
518
Exploitation Events
24
Countries
15
KEVs Targeted
Top Attacker IPs
Source IPs ranked by observed exploitation attempts in the selected window.
2026-07-14 20:45 UTC – 2026-07-15 20:45 UTC
| Rank | Attacker | Attempts | CVEs | First Seen | Last Seen | Country | Network |
|---|---|---|---|---|---|---|---|
| 1 | Attacker #1 🇷🇴 | 271 | 1 | 2026-07-15 06:24 UTC | 2026-07-15 07:46 UTC | Bucharest, Bucharest, Romania | AS9009 · M247 Europe SRL |
| 2 | Attacker #2 🇫🇷 | 32 | 3 | 2026-07-14 22:30 UTC | 2026-07-15 02:01 UTC | France | AS211590 · Bucklog SARL |
| 3 | Attacker #3 🇫🇷 | 16 | 3 | 2026-07-15 00:03 UTC | 2026-07-15 00:03 UTC | France | AS211590 · Bucklog SARL |
| 4 | Attacker #4 🇫🇷 | 16 | 3 | 2026-07-15 07:21 UTC | 2026-07-15 07:22 UTC | France | AS211590 · Bucklog SARL |
| 5 | Attacker #5 🇫🇷 | 16 | 3 | 2026-07-14 23:27 UTC | 2026-07-14 23:29 UTC | France | AS211590 · Bucklog SARL |
| 6 | Attacker #6 🇫🇷 | 16 | 3 | 2026-07-15 07:23 UTC | 2026-07-15 07:24 UTC | France | AS211590 · Bucklog SARL |
| 7 | Attacker #7 🇫🇷 | 16 | 3 | 2026-07-15 03:00 UTC | 2026-07-15 03:02 UTC | France | AS211590 · Bucklog SARL |
| 8 | Attacker #8 🇫🇷 | 12 | 1 | 2026-07-15 02:24 UTC | 2026-07-15 02:24 UTC | France | AS211590 · Bucklog SARL |
| 9 | Attacker #9 🇫🇷 | 12 | 1 | 2026-07-15 07:49 UTC | 2026-07-15 07:49 UTC | France | AS211590 · Bucklog SARL |
| 10 | Attacker #10 🇺🇸 | 11 | 1 | 2026-07-14 21:20 UTC | 2026-07-14 21:25 UTC | Boston, Massachusetts, United States | AS47583 · Hostinger International Limited |
| 11 | Attacker #11 🇯🇵 | 6 | 1 | 2026-07-14 21:38 UTC | 2026-07-15 20:28 UTC | Tokyo, Tokyo, Japan | AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| 12 | Attacker #12 🇱🇺 | 4 | 1 | 2026-07-14 23:08 UTC | 2026-07-15 04:39 UTC | Bissen, Mersch, Luxembourg | AS53667 · FranTech Solutions |
| 13 | Attacker #13 🇩🇪 | 4 | 1 | 2026-07-14 21:45 UTC | 2026-07-15 13:09 UTC | Falkenstein, Saxony, Germany | AS24940 · Hetzner Online GmbH |
| 14 | Attacker #14 🇳🇱 | 4 | 1 | 2026-07-14 20:56 UTC | 2026-07-15 07:08 UTC | Dronten, Flevoland, The Netherlands | AS41745 · Baykov Ilya Sergeevich |
| 15 | Attacker #15 🇺🇸 | 4 | 1 | 2026-07-15 01:08 UTC | 2026-07-15 09:55 UTC | United States | AS8796 · FASTNET DATA INC |
| 16 | Attacker #16 🇮🇩 | 4 | 1 | 2026-07-15 07:30 UTC | 2026-07-15 18:59 UTC | Tangerang, Banten, Indonesia | AS17727 · PT. NAP Info Lintas Nusa |
| 17 | Attacker #17 🇳🇱 | 3 | 1 | 2026-07-15 13:07 UTC | 2026-07-15 18:34 UTC | Amsterdam, North Holland, The Netherlands | AS219502 · Storm Industries LLC |
| 18 | Attacker #18 🇰🇷 | 3 | 1 | 2026-07-14 23:01 UTC | 2026-07-15 15:13 UTC | Iksan, Jeollabuk-do, South Korea | AS4766 · Korea Telecom |
| 19 | Attacker #19 🇵🇹 | 2 | 1 | 2026-07-15 11:00 UTC | 2026-07-15 11:00 UTC | Portugal | AS33876 · Dominios, S.A. |
| 20 | Attacker #20 🇨🇳 | 2 | 1 | 2026-07-15 02:56 UTC | 2026-07-15 02:56 UTC | China | AS137718 · Beijing Volcano Engine Technology Co., Ltd. |
| 21 | Attacker #21 🇺🇿 | 2 | 1 | 2026-07-15 00:48 UTC | 2026-07-15 00:48 UTC | Tashkent, Tashkent, Uzbekistan | AS35682 · Best Internet Solution Xk |
| 22 | Attacker #22 🇨🇳 | 2 | 1 | 2026-07-15 07:27 UTC | 2026-07-15 07:27 UTC | China | AS9808 · China Mobile Communications Group Co., Ltd. |
| 23 | Attacker #23 🇰🇷 | 2 | 1 | 2026-07-15 17:04 UTC | 2026-07-15 17:04 UTC | Namdong-gu, Incheon, South Korea | AS9318 · SK Broadband Co Ltd |
| 24 | Attacker #24 🇨🇭 | 2 | 1 | 2026-07-15 04:40 UTC | 2026-07-15 04:40 UTC | Zurich, Zurich, Switzerland | AS9009 · M247 Europe SRL |
| 25 | Attacker #25 🇺🇸 | 2 | 1 | 2026-07-15 05:00 UTC | 2026-07-15 05:53 UTC | Charlotte, North Carolina, United States | AS203273 · NetCrafters OU |
| 26 | Attacker #26 🇹🇭 | 2 | 1 | 2026-07-15 09:54 UTC | 2026-07-15 09:54 UTC | Thailand | AS9931 · National Telecom Public Company Limited |
| 27 | Attacker #27 🇺🇸 | 2 | 1 | 2026-07-15 10:45 UTC | 2026-07-15 10:45 UTC | Buffalo, New York, United States | AS36352 · HostPapa |
| 28 | Attacker #28 🇳🇱 | 2 | 1 | 2026-07-15 18:56 UTC | 2026-07-15 18:56 UTC | Amsterdam, North Holland, The Netherlands | AS210976 · Timeweb, LLP |
| 29 | Attacker #29 🇲🇾 | 2 | 1 | 2026-07-15 17:18 UTC | 2026-07-15 17:18 UTC | Cyberjaya, Selangor, Malaysia | AS55720 · Gigabit Hosting Sdn Bhd |
| 30 | Attacker #30 🇹🇼 | 2 | 1 | 2026-07-15 01:33 UTC | 2026-07-15 01:33 UTC | Taipei, Taipei City, Taiwan | AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| 31 | Attacker #31 🇨🇳 | 2 | 1 | 2026-07-15 01:47 UTC | 2026-07-15 01:47 UTC | China | AS146817 · Hubei Feixun Network Co., Ltd |
| 32 | Attacker #32 🇬🇧 | 2 | 1 | 2026-07-15 03:12 UTC | 2026-07-15 03:12 UTC | Epsom, England, United Kingdom | AS2856 · British Telecommunications Limited |
| 33 | Attacker #33 🇺🇸 | 2 | 1 | 2026-07-15 08:54 UTC | 2026-07-15 09:00 UTC | North Bergen, New Jersey, United States | AS14061 · DigitalOcean, LLC |
| 34 | Attacker #34 🇫🇷 | 2 | 1 | 2026-07-15 13:35 UTC | 2026-07-15 13:35 UTC | Lauterbourg, Grand Est, France | AS51167 · Contabo GmbH |
| 35 | Attacker #35 🇺🇿 | 2 | 1 | 2026-07-15 20:32 UTC | 2026-07-15 20:32 UTC | Uzbekistan | AS202660 · Uzbektelekom Joint Stock Company |
| 36 | Attacker #36 🇩🇪 | 2 | 1 | 2026-07-15 09:07 UTC | 2026-07-15 09:07 UTC | Germany | AS51167 · Contabo GmbH |
| 37 | Attacker #37 🇨🇳 | 2 | 1 | 2026-07-15 20:08 UTC | 2026-07-15 20:08 UTC | China | AS9808 · China Mobile Communications Group Co., Ltd. |
| 38 | Attacker #38 🇫🇮 | 2 | 1 | 2026-07-15 14:48 UTC | 2026-07-15 14:48 UTC | Helsinki, Uusimaa, Finland | AS215439 · Play2go International Limited |
| 39 | Attacker #39 🇺🇸 | 2 | 1 | 2026-07-15 03:14 UTC | 2026-07-15 03:46 UTC | Council Bluffs, Iowa, United States | AS396982 · Google LLC |
| 40 | Attacker #40 🇩🇪 | 2 | 1 | 2026-07-15 19:27 UTC | 2026-07-15 19:27 UTC | Frankfurt am Main, Hesse, Germany | AS215439 · Play2go International Limited |
| 41 | Attacker #41 🇧🇷 | 2 | 1 | 2026-07-15 14:25 UTC | 2026-07-15 14:25 UTC | São Paulo, São Paulo, Brazil | AS31898 · Oracle Corporation |
| 42 | Attacker #42 🇺🇸 | 2 | 1 | 2026-07-15 11:37 UTC | 2026-07-15 11:37 UTC | United States | AS36352 · HostPapa |
| 43 | Attacker #43 🇭🇰 | 2 | 1 | 2026-07-15 06:18 UTC | 2026-07-15 06:18 UTC | Hong Kong, Hong Kong | AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| 44 | Attacker #44 🇵🇰 | 1 | 1 | 2026-07-15 05:26 UTC | 2026-07-15 05:26 UTC | Lahore, Punjab, Pakistan | AS9541 · Cyber Internet Services (Pvt) Ltd. |
| 45 | Attacker #45 🇭🇰 | 1 | 1 | 2026-07-15 16:38 UTC | 2026-07-15 16:38 UTC | Hong Kong | AS4760 · HKT Limited |
| 46 | Attacker #46 🇺🇸 | 1 | 1 | 2026-07-15 06:43 UTC | 2026-07-15 06:43 UTC | Minneapolis, Minnesota, United States | AS6939 · Hurricane Electric LLC |
| 47 | Attacker #47 🇵🇰 | 1 | 1 | 2026-07-15 04:41 UTC | 2026-07-15 04:41 UTC | Sargodha, Punjab, Pakistan | AS9541 · Cyber Internet Services (Pvt) Ltd. |
| 48 | Attacker #48 🇨🇳 | 1 | 1 | 2026-07-15 08:48 UTC | 2026-07-15 08:48 UTC | Hangzhou, Zhejiang, China | AS58461 · CT-HangZhou-IDC |
| 49 | Attacker #49 🇦🇷 | 1 | 1 | 2026-07-14 21:25 UTC | 2026-07-14 21:25 UTC | Buenos Aires, Buenos Aires F.D., Argentina | AS208172 · Proton AG |
| 50 | Attacker #50 🇵🇰 | 1 | 1 | 2026-07-15 02:48 UTC | 2026-07-15 02:48 UTC | Lahore, Punjab, Pakistan | AS9541 · Cyber Internet Services (Pvt) Ltd. |
Unlock attacker IP detail
Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.
Cross-CVE Attacker Intelligence
See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.