Sensor telemetry

Attacker Intelligence

IPs observed targeting KEV Intelligence sensors, mapped to exploited CVEs.

Unique Attacker IPs
3,817
Distinct source IPs in this window
Exploitation Events
48,971
Observed exploitation attempts
Countries
99
Distinct source countries
KEVs Targeted
141
Exploited CVEs hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-05-17 00:48 UTC – 2026-08-15 00:48 UTC

#1

Attacker #1

2,381
CVEs
71
Country
Frankfurt am Main, Hesse, Germany

#2

Attacker #2

1,744
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#3

Attacker #3

1,660
CVEs
5
Country
North Bergen, New Jersey, United States

#4

Attacker #4

1,142
CVEs
5
Country
Bucharest, Bucharest, Romania

#5

Attacker #5

909
CVEs
2
Country
Ashburn, Virginia, United States

#6

Attacker #6

673
CVEs
3
Country
Kazakhstan

#7

Attacker #7

416
CVEs
3
Country
Tangerang, Banten, Indonesia

#8

Attacker #8

414
CVEs
3
Country
Singapore, Singapore

#9

Attacker #9

408
CVEs
3
Country
North Bergen, New Jersey, United States

#10

Attacker #10

394
CVEs
63
Country
United States

#11

Attacker #11

387
CVEs
11
Country
Falkenstein, Saxony, Germany

#12

Attacker #12

386
CVEs
3
Country
Tokyo, Tokyo, Japan

#13

Attacker #13

325
CVEs
3
Country
Uzbekistan

#14

Attacker #14

317
CVEs
3
Country
Hong Kong

#15

Attacker #15

309
CVEs
3
Country
Singapore, Singapore

#16

Attacker #16

306
CVEs
1
Country
Frankfurt am Main, Hesse, Germany

#17

Attacker #17

287
CVEs
1
Country
Chicago, Illinois, United States

#18

Attacker #18

274
CVEs
1
Country
United States

#19

Attacker #19

262
CVEs
1
Country
United States

#20

Attacker #20

261
CVEs
1
Country
Kyiv, Kyiv City, Ukraine

#21

Attacker #21

261
CVEs
61
Country
New York, New York, United States

#22

Attacker #22

247
CVEs
1
Country
Canada

#23

Attacker #23

238
CVEs
1
Country
Incheon, Incheon, South Korea

#24

Attacker #24

220
CVEs
1
Country
Los Angeles, California, United States

#25

Attacker #25

203
CVEs
60
Country
Hanoi, Hanoi, Vietnam

#26

Attacker #26

200
CVEs
1
Country
Tallinn, Harjumaa, Estonia

#27

Attacker #27

192
CVEs
1
Country
Bulgaria

#28

Attacker #28

191
CVEs
1
Country
Columbus, Ohio, United States

#29

Attacker #29

191
CVEs
1
Country
Tokyo, Tokyo, Japan

#30

Attacker #30

187
CVEs
87
Country
The Netherlands

#31

Attacker #31

182
CVEs
1
Country
South Tangerang, Banten, Indonesia

#32

Attacker #32

181
CVEs
1
Country
Iksan, Jeollabuk-do, South Korea

#33

Attacker #33

178
CVEs
62
Country
Tallinn, Harjumaa, Estonia

#34

Attacker #34

176
CVEs
1
Country
Nakano City, Tokyo, Japan

#35

Attacker #35

174
CVEs
60
Country
Tokyo, Tokyo, Japan

#36

Attacker #36

172
CVEs
1
Country
Jakarta, Jakarta, Indonesia

#37

Attacker #37

164
CVEs
1
Country
Lauterbourg, Grand Est, France

#38

Attacker #38

161
CVEs
1
Country
Aubervilliers, Île-de-France, France

#39

Attacker #39

160
CVEs
1
Country
San Jose, California, United States

#40

Attacker #40

160
CVEs
1
Country
Cyprus

#41

Attacker #41

159
CVEs
1
Country
Amsterdam, North Holland, The Netherlands

#42

Attacker #42

158
CVEs
48
Country
Ahmedabad, Gujarat, India

#43

Attacker #43

156
CVEs
2
Country
Bulgaria

#44

Attacker #44

144
CVEs
8
Country
France

#45

Attacker #45

140
CVEs
3
Country
Namdong-gu, Incheon, South Korea

#46

Attacker #46

138
CVEs
3
Country
Dronten, Flevoland, The Netherlands

#47

Attacker #47

137
CVEs
79
Country
Los Angeles, California, United States

#48

Attacker #48

133
CVEs
1
Country
United States

#49

Attacker #49

133
CVEs
1
Country
Cedar Knolls, New Jersey, United States

#50

Attacker #50

133
CVEs
3
Country
Osaka, Osaka, Japan

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.