Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Unique Attacker IPs
4,124
Distinct source IPs in this window
Exploitation Events
91,471
Observed exploitation attempts
Countries
100
Distinct source countries
KEVs Targeted
150
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-05-21 12:18 UTC – 2026-08-19 12:18 UTC

#1

Attacker #1

2,698
CVEs
4
Country
Kazakhstan

#2

Attacker #2

2,387
CVEs
73
Country
Frankfurt am Main, Hesse, Germany

#3

Attacker #3

1,843
CVEs
4
Country
Tangerang, Banten, Indonesia

#4

Attacker #4

1,826
CVEs
4
Country
Singapore, Singapore

#5

Attacker #5

1,744
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#6

Attacker #6

1,660
CVEs
5
Country
North Bergen, New Jersey, United States

#7

Attacker #7

1,471
CVEs
4
Country
Tokyo, Tokyo, Japan

#8

Attacker #8

1,465
CVEs
4
Country
Uzbekistan

#9

Attacker #9

1,284
CVEs
4
Country
Singapore, Singapore

#10

Attacker #10

1,142
CVEs
5
Country
Bucharest, Bucharest, Romania

#11

Attacker #11

1,074
CVEs
4
Country
Indonesia

#12

Attacker #12

909
CVEs
2
Country
Ashburn, Virginia, United States

#13

Attacker #13

784
CVEs
4
Country
United States

#14

Attacker #14

769
CVEs
4
Country
Namdong-gu, Incheon, South Korea

#15

Attacker #15

717
CVEs
4
Country
Iran

#16

Attacker #16

661
CVEs
4
Country
Hong Kong, Hong Kong

#17

Attacker #17

604
CVEs
4
Country
United Kingdom

#18

Attacker #18

544
CVEs
4
Country
Dronten, Flevoland, The Netherlands

#19

Attacker #19

542
CVEs
4
Country
China

#20

Attacker #20

515
CVEs
4
Country
Singapore, Singapore

#21

Attacker #21

495
CVEs
4
Country
Skåne County, Sweden

#22

Attacker #22

492
CVEs
4
Country
China

#23

Attacker #23

480
CVEs
4
Country
San Jose, California, United States

#24

Attacker #24

477
CVEs
4
Country
Dronten, Flevoland, The Netherlands

#25

Attacker #25

471
CVEs
4
Country
Hanoi, Hanoi, Vietnam

#26

Attacker #26

464
CVEs
4
Country
Jaipur, Rajasthan, India

#27

Attacker #27

457
CVEs
4
Country
Hong Kong, Hong Kong

#28

Attacker #28

436
CVEs
4
Country
China

#29

Attacker #29

433
CVEs
4
Country
Frankfurt am Main, Hesse, Germany

#30

Attacker #30

429
CVEs
4
Country
Zurich, Zurich, Switzerland

#31

Attacker #31

426
CVEs
4
Country
Buffalo, New York, United States

#32

Attacker #32

408
CVEs
3
Country
North Bergen, New Jersey, United States

#33

Attacker #33

408
CVEs
4
Country
Zurich, Zurich, Switzerland

#34

Attacker #34

397
CVEs
4
Country
Germany

#35

Attacker #35

396
CVEs
64
Country
United States

#36

Attacker #36

387
CVEs
11
Country
Falkenstein, Saxony, Germany

#37

Attacker #37

380
CVEs
4
Country
China

#38

Attacker #38

377
CVEs
4
Country
China

#39

Attacker #39

374
CVEs
4
Country
Singapore, Singapore

#40

Attacker #40

367
CVEs
4
Country
Thailand

#41

Attacker #41

366
CVEs
4
Country
Russia

#42

Attacker #42

361
CVEs
4
Country
United States

#43

Attacker #43

359
CVEs
4
Country
Hanoi, Hanoi, Vietnam

#44

Attacker #44

347
CVEs
4
Country
France

#45

Attacker #45

343
CVEs
4
Country
Valencia, Valencia, Spain

#46

Attacker #46

340
CVEs
4
Country
China

#47

Attacker #47

335
CVEs
4
Country
Bengaluru, Karnataka, India

#48

Attacker #48

332
CVEs
4
Country
China

#49

Attacker #49

320
CVEs
4
Country
Eastern Province, Saudi Arabia

#50

Attacker #50

317
CVEs
3
Country
Hong Kong

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.