One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
1. Executive summary A single attacker operating from IP 158.220.87.79 (Contabo VPS, Germany) has been systematically scraping unauthenticated guest-accessible data from Salesforce
18 Aug 2026 · 7 min read
read →