KEV Intelligence

Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Browse attackersExploitation Signals
Unique Attacker IPs
112
Distinct source IPs in this window
Exploitation Events
1,644
Observed exploitation attempts
Countries
30
Distinct source countries
KEVs Targeted
23
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-08-18 12:19 UTC – 2026-08-19 12:19 UTC

#1

Attacker #1

188
CVEs
1
Country
Dallas, Texas, United States

#2

Attacker #2

127
CVEs
4
Country
United States

#3

Attacker #3

126
CVEs
4
Country
Iran

#4

Attacker #4

85
CVEs
4
Country
United States

#5

Attacker #5

84
CVEs
4
Country
Singapore

#6

Attacker #6

81
CVEs
4
Country
Vietnam

#7

Attacker #7

76
CVEs
4
Country
Kazakhstan

#8

Attacker #8

46
CVEs
4
Country
Lauterbourg, Grand Est, France

#9

Attacker #9

44
CVEs
4
Country
Council Bluffs, Iowa, United States

#10

Attacker #10

44
CVEs
4
Country
Ho Chi Minh City, Ho Chi Minh, Vietnam

#11

Attacker #11

43
CVEs
4
Country
San Jose, California, United States

#12

Attacker #12

43
CVEs
4
Country
Islamabad, Islamabad, Pakistan

#13

Attacker #13

43
CVEs
4
Country
China

#14

Attacker #14

43
CVEs
4
Country
Lauterbourg, Grand Est, France

#15

Attacker #15

43
CVEs
4
Country
London, England, United Kingdom

#16

Attacker #16

43
CVEs
4
Country
Uzbekistan

#17

Attacker #17

42
CVEs
4
Country
Germany

#18

Attacker #18

42
CVEs
4
Country
China

#19

Attacker #19

42
CVEs
4
Country
Islamabad, Islamabad, Pakistan

#20

Attacker #20

42
CVEs
4
Country
Uzbekistan

#21

Attacker #21

42
CVEs
4
Country
Bengaluru, Karnataka, India

#22

Attacker #22

36
CVEs
4
Country
Vinhedo, São Paulo, Brazil

#23

Attacker #23

30
CVEs
2
Country
Seoul, Seoul, South Korea

#24

Attacker #24

23
CVEs
4
Country
Hanoi, Hanoi, Vietnam

#25

Attacker #25

22
CVEs
5
Country
France

#26

Attacker #26

13
CVEs
1
Country
France

#27

Attacker #27

11
CVEs
3
Country
Nairobi, Nairobi County, Kenya

#28

Attacker #28

9
CVEs
1
Country
Bandung, West Java, Indonesia

#29

Attacker #29

9
CVEs
1
Country
Singapore, Singapore

#30

Attacker #30

6
CVEs
2
Country
Shanghai, Shanghai, China

#31

Attacker #31

4
CVEs
1
Country
Frankfurt am Main, Hesse, Germany

#32

Attacker #32

4
CVEs
1
Country
Amsterdam, North Holland, The Netherlands

#33

Attacker #33

4
CVEs
1
Country
Singapore, Singapore

#34

Attacker #34

3
CVEs
1
Country
Eastern Province, Saudi Arabia

#35

Attacker #35

3
CVEs
1
Country
Tangerang, Banten, Indonesia

#36

Attacker #36

3
CVEs
2
Country
Hong Kong

#37

Attacker #37

3
CVEs
1
Country
London, England, United Kingdom

#38

Attacker #38

2
CVEs
1
Country
Shanghai, Shanghai, China

#39

Attacker #39

2
CVEs
1
Country
Vietnam

#40

Attacker #40

2
CVEs
2
Country
Chengdu, Sichuan, China

#41

Attacker #41

2
CVEs
1
Country
Bengaluru, Karnataka, India

#42

Attacker #42

2
CVEs
2
Country
Richardson, Texas, United States

#43

Attacker #43

2
CVEs
1
Country
Vietnam

#44

Attacker #44

2
CVEs
1
Country
Jeonju, Jeollabuk-do, South Korea

#45

Attacker #45

2
CVEs
1
Country
Yogyakarta, Indonesia

#46

Attacker #46

2
CVEs
1
Country
Tokyo, Tokyo, Japan

#47

Attacker #47

2
CVEs
1
Country
Osaka, Osaka, Japan

#48

Attacker #48

2
CVEs
1
Country
Virginia, United States

#49

Attacker #49

2
CVEs
1
Country
Amsterdam, North Holland, The Netherlands

#50

Attacker #50

2
CVEs
1
Country
Frankfurt am Main, Hesse, Germany

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Compare plans Create free account

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.

Exploitation Signals View KEV Feed Talk to Sales