Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Unique Attacker IPs
669
Distinct source IPs in this window
Exploitation Events
6,394
Observed exploitation attempts
Countries
59
Distinct source countries
KEVs Targeted
89
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-08-12 12:17 UTC – 2026-08-19 12:17 UTC

#1

Attacker #1

245
CVEs
4
Country
Vietnam

#2

Attacker #2

188
CVEs
1
Country
Dallas, Texas, United States

#3

Attacker #3

175
CVEs
4
Country
Indonesia

#4

Attacker #4

160
CVEs
4
Country
Uzbekistan

#5

Attacker #5

156
CVEs
4
Country
Iran

#6

Attacker #6

151
CVEs
4
Country
Kazakhstan

#7

Attacker #7

142
CVEs
4
Country
Tokyo, Tokyo, Japan

#8

Attacker #8

134
CVEs
4
Country
United States

#9

Attacker #9

129
CVEs
4
Country
United States

#10

Attacker #10

120
CVEs
4
Country
Uzbekistan

#11

Attacker #11

111
CVEs
1
Country
Los Angeles, California, United States

#12

Attacker #12

102
CVEs
1
Country
Taipei, Taipei City, Taiwan

#13

Attacker #13

96
CVEs
1
Country
Jakarta, Jakarta, Indonesia

#14

Attacker #14

92
CVEs
4
Country
San Jose, California, United States

#15

Attacker #15

90
CVEs
4
Country
Lauterbourg, Grand Est, France

#16

Attacker #16

84
CVEs
4
Country
Türkiye

#17

Attacker #17

84
CVEs
4
Country
Singapore

#18

Attacker #18

83
CVEs
4
Country
Singapore, Singapore

#19

Attacker #19

78
CVEs
4
Country
Tangerang, Banten, Indonesia

#20

Attacker #20

72
CVEs
4
Country
Bengaluru, Karnataka, India

#21

Attacker #21

70
CVEs
4
Country
Germany

#22

Attacker #22

69
CVEs
1
Country
United States

#23

Attacker #23

58
CVEs
4
Country
China

#24

Attacker #24

57
CVEs
32
Country
Amsterdam, North Holland, The Netherlands

#25

Attacker #25

54
CVEs
4
Country
California, United States

#26

Attacker #26

53
CVEs
4
Country
Falkenstein, Saxony, Germany

#27

Attacker #27

53
CVEs
2
Country
Osaka, Osaka, Japan

#28

Attacker #28

51
CVEs
4
Country
Lauterbourg, Grand Est, France

#29

Attacker #29

49
CVEs
4
Country
Manassas, Virginia, United States

#30

Attacker #30

49
CVEs
4
Country
Hong Kong, Hong Kong

#31

Attacker #31

48
CVEs
4
Country
Frankfurt am Main, Hesse, Germany

#32

Attacker #32

48
CVEs
1
Country
Singapore

#33

Attacker #33

48
CVEs
4
Country
China

#34

Attacker #34

47
CVEs
4
Country
Dronten, Flevoland, The Netherlands

#35

Attacker #35

47
CVEs
4
Country
Sofia, Sofia-Capital, Bulgaria

#36

Attacker #36

47
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#37

Attacker #37

46
CVEs
4
Country
Ho Chi Minh City, Ho Chi Minh, Vietnam

#38

Attacker #38

45
CVEs
1
Country
Singapore, Singapore

#39

Attacker #39

44
CVEs
3
Country
Tokyo, Tokyo, Japan

#40

Attacker #40

44
CVEs
4
Country
Council Bluffs, Iowa, United States

#41

Attacker #41

44
CVEs
4
Country
Islamabad, Islamabad, Pakistan

#42

Attacker #42

43
CVEs
4
Country
Taiwan

#43

Attacker #43

43
CVEs
4
Country
London, England, United Kingdom

#44

Attacker #44

43
CVEs
3
Country
Staten Island, New York, United States

#45

Attacker #45

42
CVEs
4
Country
Islamabad, Islamabad, Pakistan

#46

Attacker #46

42
CVEs
8
Country
France

#47

Attacker #47

42
CVEs
4
Country
Buffalo, New York, United States

#48

Attacker #48

38
CVEs
3
Country
Loyang, Singapore

#49

Attacker #49

38
CVEs
1
Country
Hong Kong, Hong Kong

#50

Attacker #50

36
CVEs
4
Country
Vinhedo, São Paulo, Brazil

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.