KEVIntel

Observed Attackers

IPs observed targeting KEVIntel sensors, mapped to exploited CVEs.

Last 24 hours Last 7 days Last 30 days Last 90 days

331

Observed Attackers

1,580

Exploitation Events

56

Countries

29

KEVs Targeted

Top Observed Attackers

Source IPs ranked by observed exploitation attempts in the selected window.

2026-07-07 10:22 UTC – 2026-07-14 10:22 UTC

Rank Attacker Attempts CVEs
1 Attacker #1 🇯🇵 191 1
2 Attacker #2 🇯🇵 75 1
3 Attacker #3 🇳🇱 46 1
4 Attacker #4 🇫🇷 32 2
5 Attacker #5 🇸🇪 28 1
6 Attacker #6 🇩🇪 27 2
7 Attacker #7 🇰🇷 26 1
8 Attacker #8 🇰🇿 26 1
9 Attacker #9 🇳🇱 24 1
10 Attacker #10 🇷🇴 24 1
11 Attacker #11 🇭🇰 24 1
12 Attacker #12 🇫🇷 24 1
13 Attacker #13 🇨🇳 24 1
14 Attacker #14 🇮🇩 20 1
15 Attacker #15 🇫🇷 17 4
16 Attacker #16 🇫🇷 17 4
17 Attacker #17 🇫🇷 17 4
18 Attacker #18 🇫🇷 17 4
19 Attacker #19 🇹🇭 14 1
20 Attacker #20 🇸🇬 14 1
21 Attacker #21 🇯🇵 14 1
22 Attacker #22 🇫🇷 13 2
23 Attacker #23 🇺🇸 13 1
24 Attacker #24 🇹🇷 12 1
25 Attacker #25 🇫🇷 12 1
26 Attacker #26 🇫🇷 12 1
27 Attacker #27 🇫🇷 12 1
28 Attacker #28 🇫🇷 12 1
29 Attacker #29 🇺🇿 12 1
30 Attacker #30 🇦🇪 10 1
31 Attacker #31 🇸🇬 10 1
32 Attacker #32 🇩🇪 10 1
33 Attacker #33 🇮🇳 10 1
34 Attacker #34 🇨🇳 10 1
35 Attacker #35 🇳🇱 10 2
36 Attacker #36 🇸🇬 10 1
37 Attacker #37 🇦🇺 10 1
38 Attacker #38 🇳🇱 10 1
39 Attacker #39 🇩🇪 9 1
40 Attacker #40 🇺🇸 9 1
41 Attacker #41 🇺🇸 9 1
42 Attacker #42 🇸🇬 8 1
43 Attacker #43 🇸🇬 8 1
44 Attacker #44 🇭🇰 8 1
45 Attacker #45 🇮🇪 8 1
46 Attacker #46 🇭🇰 8 1
47 Attacker #47 🇸🇬 8 1
48 Attacker #48 🇺🇸 7 1
49 Attacker #49 🇨🇳 7 2
50 Attacker #50 🇹🇼 6 1

Unlock attacker IP detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Compare plans Create free account

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.

Observed Exploitation View KEV Feed Talk to Sales