KEV Intelligence

Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Browse attackersExploitation Signals
Unique Attacker IPs
2,363
Distinct source IPs in this window
Exploitation Events
22,764
Observed exploitation attempts
Countries
85
Distinct source countries
KEVs Targeted
138
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-07-16 01:35 UTC – 2026-08-15 01:35 UTC

#1

Attacker #1

1,744
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#2

Attacker #2

552
CVEs
5
Country
Bucharest, Bucharest, Romania

#3

Attacker #3

478
CVEs
3
Country
Kazakhstan

#4

Attacker #4

306
CVEs
1
Country
Frankfurt am Main, Hesse, Germany

#5

Attacker #5

297
CVEs
3
Country
Tangerang, Banten, Indonesia

#6

Attacker #6

284
CVEs
3
Country
Singapore, Singapore

#7

Attacker #7

262
CVEs
1
Country
United States

#8

Attacker #8

247
CVEs
1
Country
Canada

#9

Attacker #9

233
CVEs
10
Country
Falkenstein, Saxony, Germany

#10

Attacker #10

230
CVEs
3
Country
Tokyo, Tokyo, Japan

#11

Attacker #11

225
CVEs
3
Country
Uzbekistan

#12

Attacker #12

220
CVEs
1
Country
Los Angeles, California, United States

#13

Attacker #13

213
CVEs
3
Country
Singapore, Singapore

#14

Attacker #14

200
CVEs
1
Country
Tallinn, Harjumaa, Estonia

#15

Attacker #15

192
CVEs
1
Country
Bulgaria

#16

Attacker #16

191
CVEs
1
Country
Columbus, Ohio, United States

#17

Attacker #17

187
CVEs
87
Country
The Netherlands

#18

Attacker #18

174
CVEs
60
Country
Tokyo, Tokyo, Japan

#19

Attacker #19

137
CVEs
79
Country
Los Angeles, California, United States

#20

Attacker #20

133
CVEs
3
Country
Osaka, Osaka, Japan

#21

Attacker #21

132
CVEs
1
Country
Nanjing, Jiangsu, China

#22

Attacker #22

120
CVEs
3
Country
Indonesia

#23

Attacker #23

119
CVEs
2
Country
Dallas, Texas, United States

#24

Attacker #24

117
CVEs
1
Country
Tokyo, Tokyo, Japan

#25

Attacker #25

110
CVEs
2
Country
Seattle, Washington, United States

#26

Attacker #26

108
CVEs
3
Country
Namdong-gu, Incheon, South Korea

#27

Attacker #27

106
CVEs
3
Country
Hong Kong, Hong Kong

#28

Attacker #28

105
CVEs
2
Country
Indonesia

#29

Attacker #29

102
CVEs
1
Country
Taipei, Taipei City, Taiwan

#30

Attacker #30

100
CVEs
2
Country
Bulgaria

#31

Attacker #31

97
CVEs
3
Country
China

#32

Attacker #32

96
CVEs
3
Country
United Kingdom

#33

Attacker #33

95
CVEs
3
Country
Dronten, Flevoland, The Netherlands

#34

Attacker #34

94
CVEs
3
Country
United States

#35

Attacker #35

94
CVEs
2
Country
Ashburn, Virginia, United States

#36

Attacker #36

91
CVEs
3
Country
China

#37

Attacker #37

91
CVEs
3
Country
Iran

#38

Attacker #38

90
CVEs
1
Country
Czechia

#39

Attacker #39

90
CVEs
1
Country
Singapore

#40

Attacker #40

88
CVEs
3
Country
China

#41

Attacker #41

88
CVEs
2
Country
Hong Kong

#42

Attacker #42

86
CVEs
8
Country
France

#43

Attacker #43

85
CVEs
3
Country
Frankfurt am Main, Hesse, Germany

#44

Attacker #44

79
CVEs
3
Country
Tokyo, Tokyo, Japan

#45

Attacker #45

78
CVEs
8
Country
France

#46

Attacker #46

71
CVEs
1
Country
Germany

#47

Attacker #47

70
CVEs
3
Country
San Jose, California, United States

#48

Attacker #48

70
CVEs
8
Country
France

#49

Attacker #49

69
CVEs
1
Country
United States

#50

Attacker #50

69
CVEs
3
Country
Jaipur, Rajasthan, India

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Compare plans Create free account

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.

Exploitation Signals View KEV Feed Talk to Sales