Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Unique Attacker IPs
2,434
Distinct source IPs in this window
Exploitation Events
58,660
Observed exploitation attempts
Countries
84
Distinct source countries
KEVs Targeted
144
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-07-20 12:18 UTC – 2026-08-19 12:18 UTC

#1

Attacker #1

2,257
CVEs
4
Country
Kazakhstan

#2

Attacker #2

1,744
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#3

Attacker #3

1,529
CVEs
4
Country
Singapore, Singapore

#4

Attacker #4

1,515
CVEs
4
Country
Tangerang, Banten, Indonesia

#5

Attacker #5

1,295
CVEs
4
Country
Tokyo, Tokyo, Japan

#6

Attacker #6

1,249
CVEs
4
Country
Uzbekistan

#7

Attacker #7

1,066
CVEs
4
Country
Singapore, Singapore

#8

Attacker #8

1,029
CVEs
4
Country
Indonesia

#9

Attacker #9

784
CVEs
4
Country
United States

#10

Attacker #10

717
CVEs
4
Country
Iran

#11

Attacker #11

684
CVEs
4
Country
Namdong-gu, Incheon, South Korea

#12

Attacker #12

661
CVEs
4
Country
Hong Kong, Hong Kong

#13

Attacker #13

542
CVEs
5
Country
Bucharest, Bucharest, Romania

#14

Attacker #14

515
CVEs
4
Country
Singapore, Singapore

#15

Attacker #15

514
CVEs
4
Country
United Kingdom

#16

Attacker #16

489
CVEs
4
Country
Dronten, Flevoland, The Netherlands

#17

Attacker #17

452
CVEs
4
Country
China

#18

Attacker #18

437
CVEs
4
Country
Hanoi, Hanoi, Vietnam

#19

Attacker #19

435
CVEs
4
Country
Dronten, Flevoland, The Netherlands

#20

Attacker #20

432
CVEs
4
Country
China

#21

Attacker #21

426
CVEs
4
Country
Buffalo, New York, United States

#22

Attacker #22

402
CVEs
4
Country
Jaipur, Rajasthan, India

#23

Attacker #23

401
CVEs
4
Country
Skåne County, Sweden

#24

Attacker #24

397
CVEs
4
Country
Germany

#25

Attacker #25

395
CVEs
4
Country
San Jose, California, United States

#26

Attacker #26

391
CVEs
4
Country
Zurich, Zurich, Switzerland

#27

Attacker #27

382
CVEs
4
Country
Hong Kong, Hong Kong

#28

Attacker #28

374
CVEs
4
Country
Singapore, Singapore

#29

Attacker #29

365
CVEs
4
Country
China

#30

Attacker #30

359
CVEs
4
Country
Hanoi, Hanoi, Vietnam

#31

Attacker #31

349
CVEs
4
Country
Zurich, Zurich, Switzerland

#32

Attacker #32

335
CVEs
4
Country
Bengaluru, Karnataka, India

#33

Attacker #33

323
CVEs
4
Country
China

#34

Attacker #34

310
CVEs
4
Country
London, England, United Kingdom

#35

Attacker #35

307
CVEs
4
Country
Vietnam

#36

Attacker #36

307
CVEs
4
Country
China

#37

Attacker #37

307
CVEs
4
Country
France

#38

Attacker #38

306
CVEs
1
Country
Frankfurt am Main, Hesse, Germany

#39

Attacker #39

301
CVEs
4
Country
China

#40

Attacker #40

300
CVEs
4
Country
Valencia, Valencia, Spain

#41

Attacker #41

300
CVEs
4
Country
United States

#42

Attacker #42

295
CVEs
4
Country
Germany

#43

Attacker #43

276
CVEs
4
Country
Russia

#44

Attacker #44

275
CVEs
4
Country
Eastern Province, Saudi Arabia

#45

Attacker #45

272
CVEs
4
Country
Thailand

#46

Attacker #46

262
CVEs
4
Country
Chengdu, Sichuan, China

#47

Attacker #47

262
CVEs
1
Country
United States

#48

Attacker #48

261
CVEs
4
Country
Germany

#49

Attacker #49

252
CVEs
4
Country
United States

#50

Attacker #50

252
CVEs
4
Country
Hong Kong, Hong Kong

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.