Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Unique Attacker IPs
760
Distinct source IPs in this window
Exploitation Events
4,733
Observed exploitation attempts
Countries
61
Distinct source countries
KEVs Targeted
90
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-08-08 01:46 UTC – 2026-08-15 01:46 UTC

#1

Attacker #1

209
CVEs
1
Country
Los Angeles, California, United States

#2

Attacker #2

103
CVEs
3
Country
Kazakhstan

#3

Attacker #3

102
CVEs
1
Country
Taipei, Taipei City, Taiwan

#4

Attacker #4

69
CVEs
1
Country
United States

#5

Attacker #5

66
CVEs
2
Country
Dallas, Texas, United States

#6

Attacker #6

64
CVEs
1
Country
Jakarta, Jakarta, Indonesia

#7

Attacker #7

60
CVEs
3
Country
Tokyo, Tokyo, Japan

#8

Attacker #8

56
CVEs
31
Country
Amsterdam, North Holland, The Netherlands

#9

Attacker #9

53
CVEs
1
Country
Berlin, State of Berlin, Germany

#10

Attacker #10

52
CVEs
1
Country
Osaka, Osaka, Japan

#11

Attacker #11

50
CVEs
3
Country
Singapore, Singapore

#12

Attacker #12

50
CVEs
8
Country
France

#13

Attacker #13

46
CVEs
2
Country
Dallas, Texas, United States

#14

Attacker #14

46
CVEs
2
Country
Dallas, Texas, United States

#15

Attacker #15

45
CVEs
1
Country
Singapore, Singapore

#16

Attacker #16

45
CVEs
3
Country
South Korea

#17

Attacker #17

45
CVEs
3
Country
Tangerang, Banten, Indonesia

#18

Attacker #18

43
CVEs
2
Country
Dallas, Texas, United States

#19

Attacker #19

41
CVEs
7
Country
France

#20

Attacker #20

39
CVEs
3
Country
Uzbekistan

#21

Attacker #21

39
CVEs
3
Country
Singapore, Singapore

#22

Attacker #22

38
CVEs
1
Country
Hong Kong, Hong Kong

#23

Attacker #23

37
CVEs
3
Country
United States

#24

Attacker #24

37
CVEs
6
Country
France

#25

Attacker #25

36
CVEs
6
Country
France

#26

Attacker #26

36
CVEs
1
Country
Singapore

#27

Attacker #27

35
CVEs
2
Country
Amsterdam, North Holland, The Netherlands

#28

Attacker #28

34
CVEs
2
Country
Amsterdam, North Holland, The Netherlands

#29

Attacker #29

34
CVEs
6
Country
France

#30

Attacker #30

31
CVEs
1
Country
Dunayivtsi, Khmelnytskyi Oblast, Ukraine

#31

Attacker #31

30
CVEs
3
Country
Bengaluru, Karnataka, India

#32

Attacker #32

30
CVEs
3
Country
Singapore, Singapore

#33

Attacker #33

30
CVEs
3
Country
Hong Kong, Hong Kong

#34

Attacker #34

30
CVEs
3
Country
Clifton, New Jersey, United States

#35

Attacker #35

30
CVEs
3
Country
Tokyo, Tokyo, Japan

#36

Attacker #36

30
CVEs
3
Country
Iran

#37

Attacker #37

30
CVEs
5
Country
France

#38

Attacker #38

29
CVEs
3
Country
France

#39

Attacker #39

29
CVEs
6
Country
France

#40

Attacker #40

28
CVEs
3
Country
Zurich, Zurich, Switzerland

#41

Attacker #41

27
CVEs
1
Country
Dallas, Texas, United States

#42

Attacker #42

27
CVEs
3
Country
Uzbekistan

#43

Attacker #43

27
CVEs
1
Country
France

#44

Attacker #44

26
CVEs
3
Country
Dronten, Flevoland, The Netherlands

#45

Attacker #45

25
CVEs
3
Country
United States

#46

Attacker #46

25
CVEs
4
Country
Lauterbourg, Grand Est, France

#47

Attacker #47

25
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#48

Attacker #48

25
CVEs
3
Country
Loyang, Singapore

#49

Attacker #49

25
CVEs
3
Country
China

#50

Attacker #50

24
CVEs
3
Country
Singapore, Singapore

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.