KEV Intelligence is becoming Previdian.

Sensor telemetry

Attacker Intelligence

IPs observed targeting Previdian sensors, mapped to exploited vulnerabilities.

Unique Attacker IPs
5,683
Distinct source IPs in this window
Exploitation Events
250,030
Observed exploitation attempts
Countries
106
Distinct source countries
KEVs Targeted
175
Exploited vulnerabilities hit by these IPs

Top Attacker IPs

Source IPs ranked by observed exploitation attempts · 2026-06-08 14:10 UTC – 2026-09-06 14:10 UTC

#1

Attacker #1

52,977
CVEs
1
Country
New York, New York, United States

#2

Attacker #2

4,954
CVEs
5
Country
Kazakhstan

#3

Attacker #3

3,027
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#4

Attacker #4

2,588
CVEs
5
Country
Uzbekistan

#5

Attacker #5

2,506
CVEs
5
Country
Singapore, Singapore

#6

Attacker #6

2,483
CVEs
5
Country
Tangerang, Banten, Indonesia

#7

Attacker #7

2,456
CVEs
77
Country
Frankfurt am Main, Hesse, Germany

#8

Attacker #8

2,366
CVEs
4
Country
Dallas, Texas, United States

#9

Attacker #9

2,137
CVEs
5
Country
Tokyo, Tokyo, Japan

#10

Attacker #10

2,108
CVEs
5
Country
Uzbekistan

#11

Attacker #11

2,020
CVEs
5
Country
Indonesia

#12

Attacker #12

1,944
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#13

Attacker #13

1,661
CVEs
5
Country
North Bergen, New Jersey, United States

#14

Attacker #14

1,619
CVEs
1
Country
Seattle, Washington, United States

#15

Attacker #15

1,559
CVEs
3
Country
Bulgaria

#16

Attacker #16

1,500
CVEs
3
Country
Bulgaria

#17

Attacker #17

1,483
CVEs
5
Country
Singapore, Singapore

#18

Attacker #18

1,466
CVEs
19
Country
Falkenstein, Saxony, Germany

#19

Attacker #19

1,430
CVEs
4
Country
Dallas, Texas, United States

#20

Attacker #20

1,393
CVEs
4
Country
Dallas, Texas, United States

#21

Attacker #21

1,378
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#22

Attacker #22

1,157
CVEs
5
Country
Vietnam

#23

Attacker #23

1,144
CVEs
6
Country
Bucharest, Bucharest, Romania

#24

Attacker #24

1,035
CVEs
5
Country
Eastern Province, Saudi Arabia

#25

Attacker #25

1,027
CVEs
5
Country
Paris, Île-de-France, France

#26

Attacker #26

1,026
CVEs
5
Country
United States

#27

Attacker #27

1,014
CVEs
5
Country
Loyang, Singapore

#28

Attacker #28

984
CVEs
5
Country
Dronten, Flevoland, The Netherlands

#29

Attacker #29

969
CVEs
3
Country
Dallas, Texas, United States

#30

Attacker #30

940
CVEs
5
Country
Indonesia

#31

Attacker #31

937
CVEs
2
Country
Ashburn, Virginia, United States

#32

Attacker #32

918
CVEs
5
Country
Bulgaria

#33

Attacker #33

899
CVEs
4
Country
Dallas, Texas, United States

#34

Attacker #34

892
CVEs
5
Country
Dallas, Texas, United States

#35

Attacker #35

891
CVEs
5
Country
Iran

#36

Attacker #36

867
CVEs
3
Country
Amsterdam, North Holland, The Netherlands

#37

Attacker #37

859
CVEs
5
Country
Vietnam

#38

Attacker #38

850
CVEs
5
Country
Türkiye

#39

Attacker #39

847
CVEs
5
Country
Los Angeles, California, United States

#40

Attacker #40

834
CVEs
5
Country
Seo-gu, Incheon, South Korea

#41

Attacker #41

794
CVEs
3
Country
Dallas, Texas, United States

#42

Attacker #42

791
CVEs
5
Country
Hong Kong, Hong Kong

#43

Attacker #43

774
CVEs
5
Country
Dallas, Texas, United States

#44

Attacker #44

745
CVEs
5
Country
Zurich, Zurich, Switzerland

#45

Attacker #45

744
CVEs
5
Country
Vietnam

#46

Attacker #46

712
CVEs
5
Country
Sandston, Virginia, United States

#47

Attacker #47

705
CVEs
5
Country
Vietnam

#48

Attacker #48

690
CVEs
4
Country
Amsterdam, North Holland, The Netherlands

#49

Attacker #49

686
CVEs
5
Country
Amsterdam, North Holland, The Netherlands

#50

Attacker #50

665
CVEs
5
Country
Skåne County, Sweden

Unlock Attacker IP Detail

Pro and Enterprise plans show individual attacker IPs, CVE mappings, first/last seen timestamps, and cross-sensor activity profiles.

Attacker intelligence

Cross-CVE Attacker Intelligence

See which source IPs are targeting multiple exploited vulnerabilities, review per-CVE activity, and drill into Enterprise raw telemetry where available.