KEV Intelligence

Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Browse attackersExploitation Signals
Unique Attacker IPs
738
Distinct source IPs in this window
Exploitation Events
5,511
Observed exploitation attempts
Countries
59
Distinct source countries
KEVs Targeted
93
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-08-11 11:11 UTC – 2026-08-18 11:11 UTC

#1

Attacker #1

174
CVEs
4
Country
Indonesia

#2

Attacker #2

163
CVEs
4
Country
Vietnam

#3

Attacker #3

147
CVEs
4
Country
Tokyo, Tokyo, Japan

#4

Attacker #4

123
CVEs
4
Country
Uzbekistan

#5

Attacker #5

110
CVEs
1
Country
Los Angeles, California, United States

#6

Attacker #6

102
CVEs
1
Country
Taipei, Taipei City, Taiwan

#7

Attacker #7

96
CVEs
1
Country
Jakarta, Jakarta, Indonesia

#8

Attacker #8

91
CVEs
4
Country
Singapore, Singapore

#9

Attacker #9

84
CVEs
3
Country
Kazakhstan

#10

Attacker #10

84
CVEs
4
Country
Türkiye

#11

Attacker #11

83
CVEs
4
Country
Tangerang, Banten, Indonesia

#12

Attacker #12

79
CVEs
4
Country
Uzbekistan

#13

Attacker #13

69
CVEs
1
Country
United States

#14

Attacker #14

57
CVEs
32
Country
Amsterdam, North Holland, The Netherlands

#15

Attacker #15

57
CVEs
8
Country
France

#16

Attacker #16

54
CVEs
4
Country
California, United States

#17

Attacker #17

54
CVEs
2
Country
Berlin, State of Berlin, Germany

#18

Attacker #18

53
CVEs
4
Country
Hong Kong, Hong Kong

#19

Attacker #19

53
CVEs
2
Country
Osaka, Osaka, Japan

#20

Attacker #20

53
CVEs
4
Country
Falkenstein, Saxony, Germany

#21

Attacker #21

49
CVEs
4
Country
San Jose, California, United States

#22

Attacker #22

49
CVEs
3
Country
Tokyo, Tokyo, Japan

#23

Attacker #23

48
CVEs
4
Country
Manassas, Virginia, United States

#24

Attacker #24

48
CVEs
1
Country
Singapore

#25

Attacker #25

47
CVEs
4
Country
Lauterbourg, Grand Est, France

#26

Attacker #26

47
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#27

Attacker #27

47
CVEs
4
Country
Frankfurt am Main, Hesse, Germany

#28

Attacker #28

47
CVEs
4
Country
Sofia, Sofia-Capital, Bulgaria

#29

Attacker #29

46
CVEs
4
Country
Dronten, Flevoland, The Netherlands

#30

Attacker #30

45
CVEs
1
Country
Singapore, Singapore

#31

Attacker #31

44
CVEs
4
Country
United States

#32

Attacker #32

43
CVEs
4
Country
Taiwan

#33

Attacker #33

43
CVEs
3
Country
Staten Island, New York, United States

#34

Attacker #34

40
CVEs
3
Country
Bengaluru, Karnataka, India

#35

Attacker #35

40
CVEs
7
Country
France

#36

Attacker #36

40
CVEs
3
Country
Iran

#37

Attacker #37

38
CVEs
3
Country
Loyang, Singapore

#38

Attacker #38

38
CVEs
1
Country
Hong Kong, Hong Kong

#39

Attacker #39

37
CVEs
6
Country
France

#40

Attacker #40

35
CVEs
6
Country
France

#41

Attacker #41

35
CVEs
3
Country
Clifton, New Jersey, United States

#42

Attacker #42

35
CVEs
3
Country
South Korea

#43

Attacker #43

34
CVEs
4
Country
Russia

#44

Attacker #44

34
CVEs
2
Country
Amsterdam, North Holland, The Netherlands

#45

Attacker #45

32
CVEs
1
Country
Phnom Penh, Phnom Penh, Cambodia

#46

Attacker #46

32
CVEs
1
Country
Cambodia

#47

Attacker #47

31
CVEs
3
Country
Singapore, Singapore

#48

Attacker #48

31
CVEs
4
Country
France

#49

Attacker #49

31
CVEs
1
Country
Dunayivtsi, Khmelnytskyi Oblast, Ukraine

#50

Attacker #50

30
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Compare plans Create free account

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.

Exploitation Signals View KEV Feed Talk to Sales