KEV Intelligence

Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Browse attackersExploitation Signals
Unique Attacker IPs
166
Distinct source IPs in this window
Exploitation Events
963
Observed exploitation attempts
Countries
33
Distinct source countries
KEVs Targeted
28
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-08-14 00:56 UTC – 2026-08-15 00:56 UTC

#1

Attacker #1

110
CVEs
1
Country
Los Angeles, California, United States

#2

Attacker #2

69
CVEs
1
Country
United States

#3

Attacker #3

64
CVEs
1
Country
Jakarta, Jakarta, Indonesia

#4

Attacker #4

45
CVEs
1
Country
Singapore, Singapore

#5

Attacker #5

27
CVEs
1
Country
France

#6

Attacker #6

23
CVEs
1
Country
Las Vegas, Nevada, United States

#7

Attacker #7

22
CVEs
1
Country
Taiwan

#8

Attacker #8

20
CVEs
3
Country
St Louis, Missouri, United States

#9

Attacker #9

20
CVEs
3
Country
Clifton, New Jersey, United States

#10

Attacker #10

19
CVEs
3
Country
Tokyo, Tokyo, Japan

#11

Attacker #11

19
CVEs
1
Country
Frankfurt am Main, Hesse, Germany

#12

Attacker #12

19
CVEs
1
Country
Boston, Massachusetts, United States

#13

Attacker #13

18
CVEs
1
Country
Singapore, Singapore

#14

Attacker #14

18
CVEs
3
Country
Tangerang, Banten, Indonesia

#15

Attacker #15

18
CVEs
3
Country
Kazakhstan

#16

Attacker #16

17
CVEs
3
Country
Dronten, Flevoland, The Netherlands

#17

Attacker #17

17
CVEs
1
Country
Istanbul, Istanbul, Türkiye

#18

Attacker #18

15
CVEs
4
Country
France

#19

Attacker #19

15
CVEs
3
Country
Singapore, Singapore

#20

Attacker #20

12
CVEs
3
Country
Kerkrade, Limburg, The Netherlands

#21

Attacker #21

11
CVEs
3
Country
Helsinki, Uusimaa, Finland

#22

Attacker #22

10
CVEs
3
Country
Loyang, Singapore

#23

Attacker #23

10
CVEs
3
Country
Uzbekistan

#24

Attacker #24

10
CVEs
1
Country
Singapore, Singapore

#25

Attacker #25

10
CVEs
3
Country
Vietnam

#26

Attacker #26

10
CVEs
1
Country
Singapore, Singapore

#27

Attacker #27

10
CVEs
3
Country
Russia

#28

Attacker #28

8
CVEs
1
Country
Taiwan

#29

Attacker #29

6
CVEs
3
Country
Uzbekistan

#30

Attacker #30

5
CVEs
3
Country
Iran

#31

Attacker #31

5
CVEs
3
Country
Hangzhou, Zhejiang, China

#32

Attacker #32

5
CVEs
3
Country
Iran

#33

Attacker #33

5
CVEs
3
Country
Frankfurt am Main, Hesse, Germany

#34

Attacker #34

5
CVEs
3
Country
Indonesia

#35

Attacker #35

5
CVEs
3
Country
South Korea

#36

Attacker #36

5
CVEs
3
Country
São Paulo, São Paulo, Brazil

#37

Attacker #37

5
CVEs
3
Country
United States

#38

Attacker #38

5
CVEs
3
Country
San Jose, California, United States

#39

Attacker #39

5
CVEs
3
Country
Bekasi, West Java, Indonesia

#40

Attacker #40

5
CVEs
3
Country
Singapore, Singapore

#41

Attacker #41

5
CVEs
3
Country
Frankfurt am Main, Hesse, Germany

#42

Attacker #42

5
CVEs
3
Country
Seocho, Seoul, South Korea

#43

Attacker #43

5
CVEs
3
Country
Hanoi, Hanoi, Vietnam

#44

Attacker #44

5
CVEs
3
Country
Hong Kong

#45

Attacker #45

5
CVEs
3
Country
Santa Clara, California, United States

#46

Attacker #46

5
CVEs
3
Country
China

#47

Attacker #47

5
CVEs
3
Country
Lauterbourg, Grand Est, France

#48

Attacker #48

5
CVEs
3
Country
Singapore, Singapore

#49

Attacker #49

5
CVEs
3
Country
Tokyo, Tokyo, Japan

#50

Attacker #50

5
CVEs
3
Country
Tokyo, Tokyo, Japan

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Compare plans Create free account

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.

Exploitation Signals View KEV Feed Talk to Sales