KEV Intelligence is becoming Previdian.

Sensor telemetry

Attacker Intelligence

IPs observed targeting Previdian sensors, mapped to exploited vulnerabilities.

Unique Attacker IPs
708
Distinct source IPs in this window
Exploitation Events
38,759
Observed exploitation attempts
Countries
59
Distinct source countries
KEVs Targeted
128
Exploited vulnerabilities hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-08-18 01:55 UTC – 2026-08-25 01:55 UTC

#1

Attacker #1

5,419
CVEs
1
Country
New York, New York, United States

#2

Attacker #2

1,558
CVEs
3
Country
Bulgaria

#3

Attacker #3

1,524
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#4

Attacker #4

1,468
CVEs
3
Country
Bulgaria

#5

Attacker #5

890
CVEs
4
Country
Dallas, Texas, United States

#6

Attacker #6

866
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#7

Attacker #7

701
CVEs
4
Country
Dallas, Texas, United States

#8

Attacker #8

578
CVEs
5
Country
Kazakhstan

#9

Attacker #9

568
CVEs
5
Country
Uzbekistan

#10

Attacker #10

512
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#11

Attacker #11

502
CVEs
4
Country
Dallas, Texas, United States

#12

Attacker #12

457
CVEs
5
Country
Singapore, Singapore

#13

Attacker #13

451
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#14

Attacker #14

448
CVEs
4
Country
Dallas, Texas, United States

#15

Attacker #15

440
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#16

Attacker #16

410
CVEs
5
Country
Tangerang, Banten, Indonesia

#17

Attacker #17

403
CVEs
5
Country
Lauterbourg, Grand Est, France

#18

Attacker #18

379
CVEs
3
Country
Dallas, Texas, United States

#19

Attacker #19

371
CVEs
3
Country
Dallas, Texas, United States

#20

Attacker #20

364
CVEs
5
Country
Thailand

#21

Attacker #21

357
CVEs
5
Country
Uzbekistan

#22

Attacker #22

346
CVEs
4
Country
Dallas, Texas, United States

#23

Attacker #23

329
CVEs
5
Country
Vietnam

#24

Attacker #24

284
CVEs
5
Country
Loyang, Singapore

#25

Attacker #25

282
CVEs
5
Country
St Louis, Missouri, United States

#26

Attacker #26

259
CVEs
4
Country
Dallas, Texas, United States

#27

Attacker #27

259
CVEs
5
Country
Frankfurt am Main, Hesse, Germany

#28

Attacker #28

255
CVEs
5
Country
United States

#29

Attacker #29

253
CVEs
5
Country
Vietnam

#30

Attacker #30

247
CVEs
5
Country
Indonesia

#31

Attacker #31

235
CVEs
5
Country
Indonesia

#32

Attacker #32

235
CVEs
5
Country
Vietnam

#33

Attacker #33

235
CVEs
5
Country
Toronto, Ontario, Canada

#34

Attacker #34

219
CVEs
5
Country
Islamabad, Islamabad, Pakistan

#35

Attacker #35

216
CVEs
5
Country
Dronten, Flevoland, The Netherlands

#36

Attacker #36

206
CVEs
5
Country
Eastern Province, Saudi Arabia

#37

Attacker #37

193
CVEs
5
Country
Sandston, Virginia, United States

#38

Attacker #38

192
CVEs
93
Country
Los Angeles, California, United States

#39

Attacker #39

190
CVEs
5
Country
United States

#40

Attacker #40

190
CVEs
5
Country
Hong Kong, Hong Kong

#41

Attacker #41

189
CVEs
5
Country
Inzai, Chiba, Japan

#42

Attacker #42

188
CVEs
5
Country
Helsinki, Uusimaa, Finland

#43

Attacker #43

187
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#44

Attacker #44

186
CVEs
5
Country
China

#45

Attacker #45

184
CVEs
5
Country
Türkiye

#46

Attacker #46

168
CVEs
5
Country
São Paulo, São Paulo, Brazil

#47

Attacker #47

166
CVEs
5
Country
Ho Chi Minh City, Ho Chi Minh, Vietnam

#48

Attacker #48

156
CVEs
5
Country
Vietnam

#49

Attacker #49

155
CVEs
3
Country
Bulgaria

#50

Attacker #50

148
CVEs
3
Country
Bulgaria

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.