KEV Intelligence is becoming Previdian.

Sensor telemetry

Attacker Intelligence

IPs observed targeting Previdian sensors, mapped to exploited vulnerabilities.

Unique Attacker IPs
5,317
Distinct source IPs in this window
Exploitation Events
229,694
Observed exploitation attempts
Countries
105
Distinct source countries
KEVs Targeted
170
Exploited vulnerabilities hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-06-04 11:40 UTC – 2026-09-02 11:40 UTC

#1

Attacker #1

52,977
CVEs
1
Country
New York, New York, United States

#2

Attacker #2

4,265
CVEs
5
Country
Kazakhstan

#3

Attacker #3

3,027
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#4

Attacker #4

2,498
CVEs
5
Country
Singapore, Singapore

#5

Attacker #5

2,494
CVEs
5
Country
Uzbekistan

#6

Attacker #6

2,468
CVEs
5
Country
Tangerang, Banten, Indonesia

#7

Attacker #7

2,415
CVEs
75
Country
Frankfurt am Main, Hesse, Germany

#8

Attacker #8

2,366
CVEs
4
Country
Dallas, Texas, United States

#9

Attacker #9

2,125
CVEs
5
Country
Tokyo, Tokyo, Japan

#10

Attacker #10

1,878
CVEs
5
Country
Indonesia

#11

Attacker #11

1,744
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#12

Attacker #12

1,660
CVEs
5
Country
North Bergen, New Jersey, United States

#13

Attacker #13

1,619
CVEs
1
Country
Seattle, Washington, United States

#14

Attacker #14

1,585
CVEs
5
Country
Uzbekistan

#15

Attacker #15

1,559
CVEs
3
Country
Bulgaria

#16

Attacker #16

1,500
CVEs
3
Country
Bulgaria

#17

Attacker #17

1,474
CVEs
5
Country
Singapore, Singapore

#18

Attacker #18

1,430
CVEs
4
Country
Dallas, Texas, United States

#19

Attacker #19

1,393
CVEs
4
Country
Dallas, Texas, United States

#20

Attacker #20

1,378
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#21

Attacker #21

1,142
CVEs
5
Country
Bucharest, Bucharest, Romania

#22

Attacker #22

1,063
CVEs
5
Country
Vietnam

#23

Attacker #23

1,056
CVEs
15
Country
Falkenstein, Saxony, Germany

#24

Attacker #24

988
CVEs
5
Country
Eastern Province, Saudi Arabia

#25

Attacker #25

981
CVEs
5
Country
Dronten, Flevoland, The Netherlands

#26

Attacker #26

976
CVEs
5
Country
United States

#27

Attacker #27

969
CVEs
3
Country
Dallas, Texas, United States

#28

Attacker #28

933
CVEs
5
Country
Paris, Île-de-France, France

#29

Attacker #29

918
CVEs
5
Country
Bulgaria

#30

Attacker #30

909
CVEs
2
Country
Ashburn, Virginia, United States

#31

Attacker #31

899
CVEs
4
Country
Dallas, Texas, United States

#32

Attacker #32

892
CVEs
5
Country
Dallas, Texas, United States

#33

Attacker #33

890
CVEs
5
Country
Iran

#34

Attacker #34

867
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#35

Attacker #35

834
CVEs
5
Country
Seo-gu, Incheon, South Korea

#36

Attacker #36

794
CVEs
3
Country
Dallas, Texas, United States

#37

Attacker #37

790
CVEs
5
Country
Hong Kong, Hong Kong

#38

Attacker #38

789
CVEs
5
Country
Loyang, Singapore

#39

Attacker #39

774
CVEs
5
Country
Dallas, Texas, United States

#40

Attacker #40

712
CVEs
5
Country
Sandston, Virginia, United States

#41

Attacker #41

698
CVEs
5
Country
Zurich, Zurich, Switzerland

#42

Attacker #42

697
CVEs
5
Country
Vietnam

#43

Attacker #43

690
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#44

Attacker #44

686
CVEs
5
Country
Amsterdam, North Holland, The Netherlands

#45

Attacker #45

658
CVEs
5
Country
Skåne County, Sweden

#46

Attacker #46

644
CVEs
5
Country
China

#47

Attacker #47

624
CVEs
5
Country
United Kingdom

#48

Attacker #48

615
CVEs
5
Country
Vietnam

#49

Attacker #49

590
CVEs
5
Country
Dronten, Flevoland, The Netherlands

#50

Attacker #50

587
CVEs
5
Country
Türkiye

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.