Attacker Intelligence

IPs observed targeting KEVIntel sensors, mapped to exploited CVEs.

1,502

Unique Attacker IPs

19,554

Exploitation Events

86

Countries

59

KEVs Targeted

Top Attacker IPs

Source IPs ranked by observed exploitation attempts in the selected window.

2026-04-20 09:42 UTC – 2026-07-19 09:42 UTC

Rank Attacker Attempts CVEs
1 Attacker #1 🇩🇪 2,048 32
2 Attacker #2 🇺🇸 1,561 5
3 Attacker #3 🇺🇸 909 2
4 Attacker #4 🇺🇸 406 3
5 Attacker #5 🇭🇰 316 3
6 Attacker #6 🇺🇸 307 28
7 Attacker #7 🇷🇴 300 1
8 Attacker #8 🇺🇸 287 1
9 Attacker #9 🇺🇸 274 1
10 Attacker #10 🇺🇦 261 1
11 Attacker #11 🇰🇷 238 1
12 Attacker #12 🇯🇵 191 1
13 Attacker #13 🇮🇩 182 1
14 Attacker #14 🇯🇵 176 1
15 Attacker #15 🇮🇩 172 1
16 Attacker #16 🇫🇷 162 1
17 Attacker #17 🇫🇷 161 1
18 Attacker #18 🇺🇸 160 1
19 Attacker #19 🇨🇾 160 1
20 Attacker #20 🇧🇬 156 2
21 Attacker #21 🇵🇭 126 1
22 Attacker #22 🇲🇩 125 1
23 Attacker #23 🇺🇸 119 28
24 Attacker #24 🇳🇱 114 1
25 Attacker #25 🇰🇿 112 2
26 Attacker #26 🇺🇸 110 1
27 Attacker #27 🇳🇱 99 1
28 Attacker #28 🇸🇮 96 1
29 Attacker #29 🇩🇪 92 3
30 Attacker #30 🇪🇪 91 28
31 Attacker #31 🇺🇸 91 1
32 Attacker #32 🇰🇷 90 1
33 Attacker #33 🇻🇳 86 27
34 Attacker #34 🇨🇦 83 1
35 Attacker #35 🇯🇵 76 1
36 Attacker #36 🇩🇪 75 1
37 Attacker #37 🇺🇸 74 1
38 Attacker #38 🇺🇸 72 1
39 Attacker #39 🇯🇵 71 2
40 Attacker #40 🇪🇬 71 1
41 Attacker #41 🇮🇳 70 25
42 Attacker #42 🇸🇬 67 1
43 Attacker #43 🇮🇩 65 2
44 Attacker #44 🇸🇬 64 2
45 Attacker #45 🇳🇱 61 2
46 Attacker #46 🇫🇷 58 4
47 Attacker #47 🇫🇷 58 2
48 Attacker #48 🇫🇷 58 3
49 Attacker #49 🇳🇱 58 35
50 Attacker #50 🇺🇸 55 1

Unlock attacker IP detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.