Attacker Intelligence
IPs observed targeting KEVIntel sensors, mapped to exploited CVEs.
100
Unique Attacker IPs
374
Exploitation Events
32
Countries
45
KEVs Targeted
Top Attacker IPs
Source IPs ranked by observed exploitation attempts in the selected window.
2026-07-18 09:45 UTC – 2026-07-19 09:45 UTC
| Rank | Attacker | Attempts | CVEs | First Seen | Last Seen | Country | Network |
|---|---|---|---|---|---|---|---|
| 1 | Attacker #1 🇨🇦 | 83 | 1 | 2026-07-19 06:19 UTC | 2026-07-19 06:26 UTC | Canada | AS32613 · Leaseweb Canada Inc. |
| 2 | Attacker #2 🇳🇱 | 58 | 35 | 2026-07-19 02:06 UTC | 2026-07-19 02:17 UTC | The Netherlands | AS43350 · NForce Entertainment B.V. |
| 3 | Attacker #3 🇰🇿 | 13 | 2 | 2026-07-18 11:49 UTC | 2026-07-19 08:48 UTC | Kazakhstan | AS197556 · Kar-Tel LLC |
| 4 | Attacker #4 🇨🇳 | 12 | 2 | 2026-07-18 14:01 UTC | 2026-07-19 06:54 UTC | China | AS4837 · CHINA UNICOM China169 Backbone |
| 5 | Attacker #5 🇸🇬 | 9 | 2 | 2026-07-18 10:58 UTC | 2026-07-19 00:08 UTC | Singapore, Singapore | AS396982 · Google LLC |
| 6 | Attacker #6 🇺🇿 | 8 | 1 | 2026-07-18 16:49 UTC | 2026-07-18 16:52 UTC | Tashkent, Tashkent, Uzbekistan | AS8193 · Uzbektelekom Joint Stock Company |
| 7 | Attacker #7 🇳🇱 | 7 | 1 | 2026-07-18 13:30 UTC | 2026-07-19 07:10 UTC | Amsterdam, North Holland, The Netherlands | AS219502 · Storm Industries LLC |
| 8 | Attacker #8 🇮🇩 | 6 | 2 | 2026-07-18 13:59 UTC | 2026-07-18 22:35 UTC | Tangerang, Banten, Indonesia | AS17727 · PT. NAP Info Lintas Nusa |
| 9 | Attacker #9 🇨🇳 | 6 | 2 | 2026-07-19 01:18 UTC | 2026-07-19 02:52 UTC | China | AS137718 · Beijing Volcano Engine Technology Co., Ltd. |
| 10 | Attacker #10 🇫🇷 | 6 | 2 | 2026-07-18 22:50 UTC | 2026-07-18 23:52 UTC | Paris, Île-de-France, France | AS12876 · Scaleway SAS |
| 11 | Attacker #11 🇸🇬 | 6 | 2 | 2026-07-18 14:25 UTC | 2026-07-19 00:20 UTC | Singapore, Singapore | AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| 12 | Attacker #12 🇺🇸 | 5 | 1 | 2026-07-18 10:04 UTC | 2026-07-19 08:29 UTC | United States | AS215925 · Vpsvault.host Ltd |
| 13 | Attacker #13 🇹🇼 | 5 | 2 | 2026-07-18 14:58 UTC | 2026-07-19 02:21 UTC | Taipei, Taipei City, Taiwan | AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| 14 | Attacker #14 🇰🇷 | 5 | 1 | 2026-07-18 10:44 UTC | 2026-07-18 21:35 UTC | Iksan, Jeollabuk-do, South Korea | AS4766 · Korea Telecom |
| 15 | Attacker #15 🇨🇳 | 4 | 1 | 2026-07-18 13:16 UTC | 2026-07-18 14:30 UTC | Guangzhou, Guangdong, China | AS136958 · China Unicom Guangdong IP network |
| 16 | Attacker #16 🇧🇬 | 4 | 2 | 2026-07-18 11:45 UTC | 2026-07-18 13:30 UTC | Sofia, Sofia-Capital, Bulgaria | AS209604 · 2e Telekomunikasyon Ltd Sti |
| 17 | Attacker #17 🇺🇸 | 4 | 1 | 2026-07-18 20:24 UTC | 2026-07-19 04:20 UTC | Seattle, Washington, United States | AS141995 · Contabo Asia Private Limited |
| 18 | Attacker #18 🇨🇭 | 4 | 1 | 2026-07-18 14:24 UTC | 2026-07-19 09:31 UTC | Zurich, Zurich, Switzerland | AS63023 · GTHost |
| 19 | Attacker #19 🇩🇪 | 4 | 1 | 2026-07-18 12:06 UTC | 2026-07-19 08:16 UTC | Falkenstein, Saxony, Germany | AS24940 · Hetzner Online GmbH |
| 20 | Attacker #20 🇺🇸 | 3 | 2 | 2026-07-19 07:41 UTC | 2026-07-19 07:44 UTC | Staten Island, New York, United States | AS53667 · FranTech Solutions |
| 21 | Attacker #21 🇨🇳 | 3 | 2 | 2026-07-19 06:13 UTC | 2026-07-19 06:14 UTC | Guangzhou, Guangdong, China | AS45090 · Shenzhen Tencent Computer Systems Company Limited |
| 22 | Attacker #22 🇮🇷 | 3 | 2 | 2026-07-18 23:52 UTC | 2026-07-18 23:52 UTC | Iran | AS34369 · Aria Shatel PJSC |
| 23 | Attacker #23 🇯🇵 | 3 | 2 | 2026-07-19 06:15 UTC | 2026-07-19 06:15 UTC | Tokyo, Tokyo, Japan | AS396982 · Google LLC |
| 24 | Attacker #24 🇩🇪 | 3 | 2 | 2026-07-19 01:36 UTC | 2026-07-19 01:36 UTC | Frankfurt am Main, Hesse, Germany | AS41745 · Baykov Ilya Sergeevich |
| 25 | Attacker #25 🇺🇸 | 3 | 2 | 2026-07-19 01:14 UTC | 2026-07-19 01:14 UTC | Miami, Florida, United States | AS23470 · ReliableSite.Net LLC |
| 26 | Attacker #26 🇸🇬 | 3 | 2 | 2026-07-19 07:51 UTC | 2026-07-19 07:51 UTC | Singapore, Singapore | AS132203 · Tencent Building, Kejizhongyi Avenue |
| 27 | Attacker #27 🇹🇭 | 3 | 2 | 2026-07-18 12:42 UTC | 2026-07-18 12:42 UTC | Thailand | AS9931 · National Telecom Public Company Limited |
| 28 | Attacker #28 🇻🇳 | 3 | 2 | 2026-07-19 01:01 UTC | 2026-07-19 01:02 UTC | Vietnam | AS151858 · INTERDIGI JOINT STOCK COMPANY |
| 29 | Attacker #29 🇩🇪 | 3 | 2 | 2026-07-19 08:32 UTC | 2026-07-19 08:33 UTC | Frankfurt am Main, Hesse, Germany | AS215439 · Play2go International Limited |
| 30 | Attacker #30 🇰🇷 | 3 | 2 | 2026-07-19 08:25 UTC | 2026-07-19 08:25 UTC | Seoul, Seoul, South Korea | AS45102 · Alibaba (US) Technology Co., Ltd. |
| 31 | Attacker #31 🇸🇬 | 3 | 2 | 2026-07-18 18:45 UTC | 2026-07-18 18:45 UTC | Singapore, Singapore | AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED |
| 32 | Attacker #32 🇨🇳 | 3 | 2 | 2026-07-18 20:57 UTC | 2026-07-18 20:57 UTC | China | AS9808 · China Mobile Communications Group Co., Ltd. |
| 33 | Attacker #33 🇨🇳 | 3 | 2 | 2026-07-19 08:18 UTC | 2026-07-19 08:19 UTC | China | AS9808 · China Mobile Communications Group Co., Ltd. |
| 34 | Attacker #34 🇨🇳 | 3 | 2 | 2026-07-18 18:46 UTC | 2026-07-18 18:48 UTC | China | AS56045 · China Mobile communications corporation |
| 35 | Attacker #35 🇨🇳 | 3 | 2 | 2026-07-19 04:45 UTC | 2026-07-19 04:46 UTC | China | AS4134 · Chinanet |
| 36 | Attacker #36 🇻🇳 | 2 | 1 | 2026-07-19 04:06 UTC | 2026-07-19 05:21 UTC | Vietnam | AS45557 · Vietnam Technology and Telecommunication JSC |
| 37 | Attacker #37 🇻🇳 | 2 | 1 | 2026-07-18 21:39 UTC | 2026-07-19 07:27 UTC | Vietnam | AS131423 · Branch of Long Van System Solution JSC - Hanoi |
| 38 | Attacker #38 🇮🇩 | 2 | 1 | 2026-07-18 12:47 UTC | 2026-07-18 23:32 UTC | Indonesia | AS140456 · PT Era Awan Digital |
| 39 | Attacker #39 🇳🇱 | 2 | 1 | 2026-07-19 03:47 UTC | 2026-07-19 03:58 UTC | The Netherlands | AS60781 · LeaseWeb Netherlands B.V. |
| 40 | Attacker #40 🇳🇱 | 2 | 1 | 2026-07-18 22:59 UTC | 2026-07-18 23:04 UTC | Amsterdam, North Holland, The Netherlands | AS219502 · Storm Industries LLC |
| 41 | Attacker #41 🇳🇱 | 2 | 1 | 2026-07-18 14:28 UTC | 2026-07-18 14:29 UTC | Amsterdam, North Holland, The Netherlands | AS48090 · Techoff Srv Limited |
| 42 | Attacker #42 🇨🇳 | 2 | 2 | 2026-07-18 15:42 UTC | 2026-07-18 17:10 UTC | Hangzhou, Zhejiang, China | AS58461 · CT-HangZhou-IDC |
| 43 | Attacker #43 🇦🇪 | 2 | 1 | 2026-07-19 08:10 UTC | 2026-07-19 09:19 UTC | Dubai, Dubai, United Arab Emirates | AS21859 · Zenlayer Inc |
| 44 | Attacker #44 🇬🇧 | 2 | 1 | 2026-07-18 09:53 UTC | 2026-07-18 21:53 UTC | United Kingdom | AS215540 · Global Connectivity Solutions Llp |
| 45 | Attacker #45 🇺🇸 | 2 | 1 | 2026-07-18 11:11 UTC | 2026-07-19 05:12 UTC | Virginia, United States | AS45102 · Alibaba (US) Technology Co., Ltd. |
| 46 | Attacker #46 🇨🇳 | 2 | 1 | 2026-07-18 19:23 UTC | 2026-07-19 07:27 UTC | Hangzhou, Zhejiang, China | AS37963 · Hangzhou Alibaba Advertising Co.,Ltd. |
| 47 | Attacker #47 🇨🇳 | 2 | 1 | 2026-07-18 20:14 UTC | 2026-07-18 23:45 UTC | China | AS9808 · China Mobile Communications Group Co., Ltd. |
| 48 | Attacker #48 🇯🇵 | 1 | 1 | 2026-07-18 10:28 UTC | 2026-07-18 10:28 UTC | Tokyo, Tokyo, Japan | AS212336 · ByteVirt LLC |
| 49 | Attacker #49 🇺🇸 | 1 | 1 | 2026-07-18 15:35 UTC | 2026-07-18 15:35 UTC | Council Bluffs, Iowa, United States | AS396982 · Google LLC |
| 50 | Attacker #50 🇺🇸 | 1 | 1 | 2026-07-18 19:16 UTC | 2026-07-18 19:16 UTC | Council Bluffs, Iowa, United States | AS396982 · Google LLC |
Unlock attacker IP detail
Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.
Cross-CVE Attacker Intelligence
See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.