141.98.218.104 // Port scanning
185.93.89.76 // Credential Stuffing
36.140.16.173 // failure audit: an account failed to log on
186.98.233.48 // Brute force against multiple 365
1.215.228.156 // network connection detected
64.62.156.56 // scanning IP
197.255.224.193 // failure audit: an account failed to log on
183.214.173.226 // failure audit: an account failed to log on
88.214.25.25 // failure audit: an account failed to log on
102.164.88.140 // failure audit: an account failed to log on
185.196.220.247 // failure audit: an account failed to log on
218.205.64.41 // failure audit: an account failed to log on
45.227.254.153 // failure audit: an account failed to log on
111.68.102.195 // failure audit: an account failed to log on
144.172.115.212 // Lumma Stealer - Defender - Nathan
45.134.225.135 // failure audit: an account failed to log on
169.197.113.175 // network connection detected
109.205.213.166 // network connection detected
35.222.21.31 // attempt log4j
194.180.48.175 // network connection detected
194.180.48.171 // network connection detected
194.180.48.170 // network connection detected
194.180.48.169 // network connection detected
194.180.48.75 // network connection detected
194.180.48.42 // network connection detected
194.180.49.229 // network connection detected
194.180.48.73 // network connection detected
194.180.49.228 // network connection detected
194.180.49.227 // network connection detected
194.180.49.226 // network connection detected
194.180.49.223 // network connection detected
194.180.49.221 // network connection detected
103.165.162.163 // failure audit: an account failed to log on
194.0.234.12 // network connection detected
34.61.224.203 // failure audit: an account failed to log on
144.172.112.208 // Malicious Scanning
45.227.254.152 // failure audit: an account failed to log on
194.180.49.43 // failure audit: an account failed to log on
201.22.227.249 // failure audit: an account failed to log on
106.215.84.250 // failure audit: an account failed to log on
36.70.158.71 // failure audit: an account failed to log on
193.36.224.7 // Credential Stuffing
103.99.214.2 // failure audit: an account failed to log on
111.53.24.108 // failure audit: an account failed to log on
179.60.146.61 // failure audit: an account failed to log on
91.199.163.13 // failure audit: an account failed to log on
91.199.163.12 // failure audit: an account failed to log on
193.29.13.6 // failure audit: an account failed to log on
102.88.21.214 // network connection detected
179.60.146.60 // failure audit: an account failed to log on
110.138.84.42 // failure audit: an account failed to log on
89.185.80.195 // Credential Stuffing
34.134.188.75 // attempt log4j
182.65.46.197 // failure audit: an account failed to log on
95.214.55.202 // failure audit: an account failed to log on
104.167.221.114 // Web Exploits
194.180.49.222 // failure audit: an account failed to log on
34.10.247.128 // failure audit: an account failed to log on
92.63.197.159 // network connection detected
34.41.57.6 // attempt log4j
91.192.47.240 // failure audit: an account failed to log on
27.123.2.89 // failure audit: an account failed to log on
139.5.157.104 // failure audit: an account failed to log on
194.180.49.225 // failure audit: an account failed to log on, network connection detected
194.180.49.224 // failure audit: an account failed to log on
194.180.48.176 // failure audit: an account failed to log on, network connection detected
96.9.68.194 // failure audit: an account failed to log on
45.250.239.107 // failure audit: an account failed to log on
193.24.211.23 // network connection detected
157.66.100.186 // network connection detected
152.32.204.21 // network connection detected
92.63.197.58 // network connection detected
103.99.214.1 // failure audit: an account failed to log on
185.156.73.50 // failure audit: an account failed to log on
144.172.116.95 // Web Exploits
144.172.112.160 // Brute Force
144.172.115.132 // Brute Force
144.172.93.103 // Brute Force
144.172.116.164 // Brute Force
144.172.117.111 // Brute Force
91.202.233.4 // failure audit: an account failed to log on
185.233.166.221 // BruteForce
122.202.246.213 // network connection detected, failure audit: an account failed to log on
185.196.220.41 // failure audit: an account failed to log on
88.214.25.24 // failure audit: an account failed to log on
141.98.11.61 // failure audit: an account failed to log on
78.142.18.92 // failure audit: an account failed to log on
179.61.150.18 // Credential Stuffing
88.214.25.23 // failure audit: an account failed to log on
34.67.216.201 // failure audit: an account failed to log on
91.238.181.18 // failure audit: an account failed to log on
195.82.146.167 // network connection detected
2.57.121.247 // network connection detected
185.189.162.199 // Scanning
92.63.197.193 // failure audit: an account failed to log on
88.214.25.74 // failure audit: an account failed to log on
92.63.197.57 // failure audit: an account failed to log on
92.63.197.144 // failure audit: an account failed to log on
202.69.59.213 // failure audit: an account failed to log on
118.107.40.165 // failure audit: an account failed to log on
88.214.25.73 // failure audit: an account failed to log on
92.63.197.9 // failure audit: an account failed to log on
185.243.96.116 // failure audit: an account failed to log on
185.243.96.107 // failure audit: an account failed to log on
35.225.124.11 // failure audit: an account failed to log on
193.37.69.105 // failure audit: an account failed to log on
111.7.106.105 // Scanning IP
79.124.8.77 // failure audit: an account failed to log on
92.63.197.46 // failure audit: an account failed to log on
45.227.254.41 // failure audit: an account failed to log on
80.79.5.58 // failure audit: an account failed to log on
36.140.131.209 // failure audit: an account failed to log on
34.58.40.145 // attempt exploits
91.199.163.20 // network connection detected
36.77.67.87 // failure audit: an account failed to log on
134.209.78.61 // failure audit: an account failed to log on
210.19.252.30 // network connection detected
81.17.143.28 // failure audit: an account failed to log on
47.245.113.242 // network connection detected
43.156.116.148 // network connection detected
43.133.191.152 // network connection detected
88.214.25.20 // failure audit: an account failed to log on
185.45.228.192 // failure audit: an account failed to log on
42.116.239.216 // failure audit: an account failed to log on
43.133.198.66 // network connection detected
45.148.126.180 // Reconnaissance
45.140.17.52 // failure audit: an account failed to log on
104.154.205.84 // failure audit: an account failed to log on
217.160.224.240 // failure audit: an account failed to log on
51.79.250.137 // network connection detected
45.191.4.249 // failure audit: an account failed to log on
103.165.39.162 // failure audit: an account failed to log on
111.93.74.158 // failure audit: an account failed to log on
88.99.167.103 // failure audit: an account failed to log on
185.243.96.130 // failure audit: an account failed to log on
176.65.148.52 // Web Exploits
110.49.3.33 // failure audit: an account failed to log on
194.180.48.174 // network connection detected, failure audit: an account failed to log on
194.180.48.173 // failure audit: an account failed to log on
194.180.48.172 // failure audit: an account failed to log on
49.206.197.57 // failure audit: an account failed to log on
5.79.71.205 // Botnet Command and Control Server
51.161.174.170 // network connection detected
160.30.172.105 // network connection detected
203.113.4.231 // failure audit: an account failed to log on
123.25.96.124 // failure audit: an account failed to log on
207.102.138.19 // IP Scanning
37.221.18.192 // failure audit: an account failed to log on
103.164.98.13 // failure audit: an account failed to log on
34.134.207.193 // attempt log4j
34.42.133.108 // attempt log4j
195.178.110.98 // network connection detected
124.115.173.194 // failure audit: an account failed to log on
83.238.161.87 // network connection detected
221.229.174.4 // network connection detected
113.249.157.171 // network connection detected
117.80.186.118 // network connection detected
45.227.254.151 // failure audit: an account failed to log on
45.227.254.154 // failure audit: an account failed to log on
18.224.171.12 // Scanning IP
45.227.254.156 // failure audit: an account failed to log on
45.227.254.155 // failure audit: an account failed to log on
103.96.40.38 // failure audit: an account failed to log on
45.135.232.95 // failure audit: an account failed to log on
82.147.84.190 // failure audit: an account failed to log on
95.214.55.208 // network connection detected, failure audit: an account failed to log on
112.12.102.76 // failure audit: an account failed to log on
187.202.203.168 // failure audit: an account failed to log on
80.77.113.216 // failure audit: an account failed to log on
193.188.192.221 // failure audit: an account failed to log on
202.165.230.123 // failure audit: an account failed to log on
182.180.57.9 // failure audit: an account failed to log on
110.93.246.223 // failure audit: an account failed to log on
45.7.118.22 // failure audit: an account failed to log on
103.166.143.133 // failure audit: an account failed to log on
175.100.79.126 // failure audit: an account failed to log on
141.98.11.147 // Scanning
114.217.26.245 // Scanning IP
113.23.125.117 // failure audit: an account failed to log on
2.57.121.246 // failure audit: an account failed to log on
2.57.121.181 // network connection detected
193.46.255.42 // network connection detected
193.46.255.7 // failure audit: an account failed to log on
64.225.107.222 // Scanning IP
143.110.217.66 // Scanning IP
146.190.81.34 // Scanning IP
134.199.148.83 // Scanning IP
192.241.174.110 // Web Exploits
34.171.50.32 // Malicious Scanning
111.68.104.76 // failure audit: an account failed to log on
41.242.48.18 // Web Exploits
34.107.176.5 // Testing the Blacklist
211.105.223.49 // Web Exploits
204.76.203.229 // Scanning IP
34.55.125.88 // Web Exploits
130.211.202.56 // Web Exploits
91.238.181.27 // failure audit: an account failed to log on
193.24.123.245 // failure audit: an account failed to log on
91.238.181.26 // failure audit: an account failed to log on
196.251.71.46 // suspicious VPS
68.183.193.242 // Scanning IP
207.90.244.10 // Web Exploits
176.65.148.236 // Web Exploits
80.94.95.234 // failure audit: an account failed to log on
179.60.146.33 // failure audit: an account failed to log on
179.60.146.37 // failure audit: an account failed to log on
179.60.146.36 // failure audit: an account failed to log on
179.60.146.30 // failure audit: an account failed to log on
179.60.146.32 // failure audit: an account failed to log on
35.222.0.254 // Web Exploits
77.83.207.193 // failure audit: an account failed to log on
207.90.244.26 // Scanning IP
164.92.106.15 // Scanning IP
179.60.146.31 // failure audit: an account failed to log on
198.12.89.161 // failure audit: an account failed to log on
77.83.207.205 // failure audit: an account failed to log on
141.98.83.10 // failure audit: an account failed to log on
141.98.83.70 // failure audit: an account failed to log on
185.156.73.12 // failure audit: an account failed to log on
179.60.146.35 // failure audit: an account failed to log on
179.60.146.34 // failure audit: an account failed to log on
185.39.19.58 // failure audit: an account failed to log on
185.39.19.57 // failure audit: an account failed to log on
94.102.49.187 // failure audit: an account failed to log on
94.102.49.147 // failure audit: an account failed to log on
92.63.197.239 // failure audit: an account failed to log on
92.63.197.231 // failure audit: an account failed to log on
92.63.197.2 // failure audit: an account failed to log on
89.248.172.30 // failure audit: an account failed to log on
89.248.168.156 // failure audit: an account failed to log on
89.248.163.186 // failure audit: an account failed to log on
80.82.65.75 // failure audit: an account failed to log on
185.156.73.226 // failure audit: an account failed to log on
185.156.73.17 // failure audit: an account failed to log on
188.246.224.186 // failure audit: an account failed to log on
185.39.19.70 // failure audit: an account failed to log on, network connection detected
185.39.19.68 // network connection detected
185.39.19.69 // failure audit: an account failed to log on, network connection detected
91.134.185.84 // Web Exploits
34.81.80.196 // Web Exploits
35.221.207.210 // Web Exploits
34.80.232.187 // Web Exploits
35.221.215.67 // Web Exploits
34.81.174.54 // Web Exploits
34.80.71.29 // Web Exploits
34.80.75.43 // Web Exploits
34.80.148.137 // Web Exploits
35.221.181.199 // Web Exploits
34.80.21.96 // Web Exploits
35.234.28.62 // Web Exploits
34.81.201.65 // Web Exploits
34.81.230.255 // Web Exploits
34.81.4.17 // Web Exploits
137.184.171.141 // Scanning IP
93.123.109.228 // Scanning IP
34.80.150.40 // attempting exploit
79.124.58.198 // scanning iP
159.223.161.8 // Web Exploits
202.112.237.201 // Malicious Scanning
45.140.17.98 // network connection detected
92.63.197.197 // failure audit: an account failed to log on
194.180.49.169 // failure audit: an account failed to log on
165.154.59.90 // Brute Force
141.98.10.151 // Web Exploits
45.135.232.96 // failure audit: an account failed to log on
34.71.204.153 // Malicious Scanning
45.140.17.107 // failure audit: an account failed to log on
185.218.84.168 // Scanning IP
34.56.176.50 // attempt log4j
91.236.116.242 // Scanning IP
196.190.118.132 // SMTP port Scanning
154.195.116.58
154.195.105.98
154.195.111.28
154.194.119.94
154.195.135.235
154.195.111.87
154.195.96.169
154.195.147.8
154.194.80.53
154.195.176.84
154.195.163.14
154.195.144.90
154.195.113.69
154.195.174.12
154.195.171.244
154.195.3.157
154.195.165.15
154.194.7.167
154.194.72.9
154.195.3.169
154.195.135.168
154.195.123.55
154.195.182.124
154.195.110.158
154.194.103.182
154.195.166.100 // risky sign in
103.108.174.11 // Web Exploits
80.94.95.203 // network connection detected, failure audit: an account failed to log on
78.142.18.219 // Bots
192.155.90.118 // Scanning - Linode
85.121.148.144 // Scanning IP
38.148.95.217 // Brute Force
103.180.240.96 // Brute Force
5.180.242.254 // Brute Force
209.173.10.75 // Brute Force
91.203.124.210 // Brute Force
196.190.41.137 // Brute Force
122.187.229.78 // Brute Force
115.144.115.150 // Brute Force
185.167.56.34 // Brute Force
196.188.187.205 // Brute Force
111.70.25.48 // Brute Force
77.139.82.133 // Brute Force
121.202.138.181 // Brute Force
5.183.209.244 // Web Scanning
162.247.74.7 // Scanning IP
204.8.96.155 // Scanning IP
204.8.96.105 // Scanning IP
159.65.133.5 // Credential Stuffing
152.42.212.110 // Credential Stuffing
167.71.207.7 // Credential Stuffing
139.59.115.129 // Credential Stuffing
152.42.203.135 // Credential Stuffing
34.68.34.64 // attempt log4j exploits
193.163.125.161 // Scanning IP
60.247.92.186 // Scanning IP
103.203.59.0 // Scanning IP
8.34.210.53 // attempt log4j
3.216.145.155 // Incident 11042025
31.171.154.59 // Incident 11042025
185.190.24.101 // Credential Stuffing
45.248.64.165 // Brute
80.66.88.30 // failure audit: an account failed to log on
165.227.156.225 // Port Scanning
170.64.229.42 // Port Scanning
103.35.188.74 // SSL Fails
167.88.160.70 // SSL Fails
5.180.24.93 // SSL Fails
103.35.189.241 // SSL Fails
111.7.96.156 // Scanning IP
8.152.208.190 // Web Exploits
45.90.162.234 // Web Exploits
34.19.127.189 // JNDI Attempts
66.96.194.170 // Credential Stuffing
87.120.127.0/27 // Credential Stuffing
92.119.196.0/27 // Credential Stuffing
92.119.197.0/27 // Credential Stuffing
195.178.110.164 // Web Exploits
35.188.74.106 // Web Exploits
34.171.115.142 // Web Exploits
141.98.11.27 // Web Exploits
141.98.11.210 // Web Exploits
45.87.43.37 // Web Exploits
185.191.127.222 // Malicious Scanning
165.227.188.42 // Malicious Scanning
35.226.222.151 // Web Exploits
34.57.187.192 // Web Exploits
218.250.231.191 // Web Exploits
35.239.83.250 // Web Exploits
181.115.171.157 // Scanning IP
195.178.110.163 // Secret Digging
34.28.58.52 // Web Exploits
31.170.22.205 // Web Exploits
34.132.135.234 // attempt exploits
34.19.116.62 // attempt exploits
35.192.153.30 // attempt exploits
196.191.212.238 // Brute Force
89.179.78.247 // Brute Force
196.28.226.125 // Brute Force
5.180.234.228 // Brute Force
2.55.125.200 // Brute Force
77.83.255.10 // Brute Force
72.5.43.31 // Cyberpunks[.] chat IR
34.30.4.191 // Web Exploits
34.135.157.139 // Web Exploits
34.70.230.87 // Web Exploits
61.53.144.224 // Web Exploits
45.164.177.118 // Web Exploits
130.61.60.124 // Web Exploits
194.156.99.80 // Web Exploits
34.71.205.208 // Web Exploits
185.40.4.51 // Web Exploits
45.148.10.35 // Web Exploits
62.60.191.64 // Scanning IP
139.59.125.28 // Web Exploits
167.172.224.131 // Web Exploits
111.7.106.107 // Scanning IP
34.121.46.155 // Web Exploits
185.156.73.167 // failure audit: an account failed to log on
124.135.44.252 // Web Exploits
45.148.10.81 // Hostile Scanning
34.69.3.247 // Web Exploits
34.44.147.20 // Web Exploits
34.134.31.77 // Web Exploits
158.58.190.46 // Web Exploits
34.19.116.58 // attempt exploits
35.202.89.174 // Web Exploits
34.30.210.247 // Web Exploits
34.28.114.111 // Web Exploits
196.251.83.180 // Web Exploits
118.193.56.246 // Scanning IP
5.143.245.194 // Web Exploits
185.42.12.66 // SSL Fails
194.165.16.18 // failure audit: an account failed to log on
91.238.181.8 // failure audit: an account failed to log on
91.238.181.10 // failure audit: an account failed to log on
91.238.181.7 // failure audit: an account failed to log on
91.238.181.6 // failure audit: an account failed to log on
185.213.173.51 // Web Exploits
45.164.177.161 // Log4j Attempts
185.91.127.9 // Log4j Attempts
8.34.210.49 // attempt exploits
177.92.240.168 // attempt exploits
50.3.137.177 // Brute Force
5.157.5.100 // Brute Force
107.173.112.245 // Brute Force
185.122.170.10 // Brute Force
23.81.230.134 // Brute Force
138.94.218.193 // Brute Force
104.160.17.116 // Brute Force
107.150.71.30 // Brute Force
34.68.34.81 // attempt exploits
45.178.251.94 // Web Exploits
185.42.12.65 // SSL Fails
119.185.243.223 // Web Exploits
35.224.204.209 // Web Exploits
34.44.34.37 // Web Exploits
103.146.158.143 // Web Exploits
35.195.46.0 // Web Exploits
143.110.208.18 // Web Exploits
95.214.53.198 // Web Exploits
34.67.56.248 // Web Exploits
117.186.191.142 // Web Exploits
213.230.92.40 // Scanning
209.38.144.40 // Scanning
24.199.112.66 // Port scanning
194.165.16.163 // failure audit: an account failed to log on
194.165.16.164 // failure audit: an account failed to log on
194.165.16.162 // failure audit: an account failed to log on
194.165.16.167 // failure audit: an account failed to log on
194.165.16.161 // failure audit: an account failed to log on
194.165.16.166 // failure audit: an account failed to log on
194.165.16.165 // failure audit: an account failed to log on
91.238.181.94 // failure audit: an account failed to log on
91.238.181.92 // failure audit: an account failed to log on
91.238.181.95 // failure audit: an account failed to log on
91.238.181.96 // failure audit: an account failed to log on
91.238.181.93 // failure audit: an account failed to log on
91.238.181.91 // failure audit: an account failed to log on
88.214.25.123 // failure audit: an account failed to log on
88.214.25.125 // failure audit: an account failed to log on
88.214.25.121 // failure audit: an account failed to log on
88.214.25.124 // failure audit: an account failed to log on
46.73.96.182 // Password Spray
194.85.251.34 // Web Exploits
37.221.66.57 // DDOS
34.19.116.54 // Web Exploits
197.205.59.231 // Brute Force
103.247.7.66 // attempt exploits
128.199.215.40 // Scanning IP
77.51.214.170 // Brute Force
111.48.208.197 // Brute Force
46.72.252.233 // Brute Force
112.168.71.109 // Brute Force
188.227.66.92 // Brute Force
110.35.63.30 // Brute Force
111.70.19.149 // Brute Force
61.146.121.14 // Brute Force
218.23.95.14 // Brute Force
221.149.233.245 // Brute Force
220.120.224.227 // Brute Force
27.223.100.90 // Brute Force
117.70.94.155 // Port scanning
45.125.66.114 // Web Exploits
124.228.83.189 // Password Spray
165.154.226.146 // Web Exploits
122.225.203.106 // Brute Force
124.114.180.50 // Brute force
37.26.136.250 // Aikapool Crypto mining pool IP
91.224.92.10 // Web Exploits
69.50.94.110 // BruteForce
223.118.50.87 // appserve request
34.19.116.48 // attempt exploits
134.122.106.248 // Scanning IP
38.54.101.65 // Palo Alto PAN-OS CVE-2025-0108 Auth Bypass Attempt - GreyNoise
1.55.112.205 // Palo Alto PAN-OS CVE-2025-0108 Auth Bypass Attempt - GreyNoise
123.116.247.134 // Palo Alto PAN-OS CVE-2025-0108 Auth Bypass Attempt - GreyNoise
198.12.122.248 // Palo Alto PAN-OS CVE-2025-0108 Auth Bypass Attempt - GreyNoise
47.190.9.241 // Palo Alto PAN-OS CVE-2025-0108 Auth Bypass Attempt - greynoise
38.54.50.252 // Palo Alto PAN-OS CVE-2025-0108 Auth Bypass Attempt - greynoise
121.202.153.100 // Brute Force
61.153.208.38 // Brute Force
185.42.12.96 // Fortigate Brute
141.98.11.205 // Web Exploits
34.68.34.92 // attempt exploits
221.224.2.202 // Brute Force
182.76.87.90 // Brute Force
91.134.185.87 // Scanning IP
185.156.73.166 // failure audit: an account failed to log on
36.139.105.112 // Scanning
222.216.206.99 // Web Exploits
47.100.201.178 // Web Exploits
190.212.140.11 // Web Exploits
202.0.92.253 // Web Exploits
8.218.73.108 // Web Exploits
81.181.248.148 // Web Exploits
221.122.67.75 // Web Exploits
124.236.100.56 // Web bot: DDoS
154.212.141.161 // Scanning IP
130.61.229.116 // Web Exploits
64.62.156.41 // Scanning IP
149.137.142.15 // BackBlaze IP Address
202.22.140.219 // Malicious Login
36.189.253.253 // Web Exploits
146.19.24.76 // Scanning IP
8.34.210.35 // attempt exploits
85.206.91.51 // Brute Force
135.125.204.13 // Brute Force
185.42.12.124 // Credential Stuffing
185.93.89.118 // Web Exploits
185.156.73.74 // failure audit: an account failed to log on
92.63.197.22 // failure audit: an account failed to log on
49.236.203.211 // Scanning
75.119.138.110 // Web Exploits
178.216.220.91 // Brute Force
110.175.220.250 // Brute Force
34.68.34.85 // attempt exploits
141.98.10.33 // Network connection detected
154.212.141.147 // Scanning IP
113.140.95.250 // Brute Force
8.211.44.115 // TCP Scans
192.42.116.212 // Scanning IP
84.239.45.17 // Scanning IP
34.68.34.87 // attempt exploits
102.53.15.54 // Brute Force
34.68.34.89 // Malicious Scanning
13.64.108.189 // SSL Fail
65.49.1.41 // SSL Fail
65.49.1.43 // SSL fail
36.224.97.59 // Web Exploits
60.13.146.4 // Web Exploits
5.189.153.135 // Web Exploits
45.61.157.172 // SSL Fail
144.172.96.123 // SSL Fail
144.172.97.104 // SSL Fail
172.86.111.64 // SSL Fail
45.150.65.66 // SSL Fail
103.113.70.129 // SSL Fail
45.61.135.124 // SSL Fail
103.35.190.61 // SSL Fail
50.114.94.170 // SSL Fail
193.56.116.207 // SSL Fail
193.37.33.223 // SSL Fail
157.97.121.119 // SSL Fail
193.37.33.246 // SSL Fail
136.144.42.214 // SSL Fail
45.132.115.6 // SSL Fail
104.234.32.168 // SSL Fail
45.146.55.36 // SSL Fail
35.89.137.11 // Web Exploits
192.42.116.201 // TOR
185.220.101.54 // TOR
87.121.84.7 // Web Exploits
91.134.185.88 // Scanning IP
207.90.244.2 // Scanning IP
8.34.210.50 // attempt exploits
174.138.84.177 // Scanning IP
167.114.209.103 // Scanning IP
34.68.34.66 // attempt exploits
34.68.34.91 // attempt exploits
146.185.239.70 // Brute Force
111.23.122.227 // Web Exploits
95.164.35.50 // SSL Fail
94.131.97.81 // SSL Fail
95.164.69.68 // SSL Fail
94.131.120.228 // SSL Fail
45.83.131.89 // SSL Fail
45.83.20.253 // SSL Fail
176.120.75.183 // SSL Fail
185.73.125.74 // SSL Fail
176.120.75.184 // SSL Fail
176.120.75.209 // SSL Fail
176.120.75.145 // SSL Fail
176.120.75.142 // SSL Fail
147.135.23.100 // Scanning
34.19.127.183 // attempt exploits
154.84.61.148 // Web Exploits
146.190.145.108 // Web Exploits
123.160.129.212 // Brute Force
108.165.153.95 // Brute Force
211.196.31.2 // Brute Force
34.68.34.75 // attempt exploits
34.68.34.77 // attempt exploits
8.34.210.51 // attempt exploits
197.55.224.113 // spray
38.180.6.79 // Brute Force
172.86.109.95 // Brute Force
172.86.106.65 // Brute Force
172.86.104.221 // Brute Force
172.86.111.210 // Brute Force
195.149.87.72 // Brute Force
38.180.6.75 // Scanning IP
109.248.160.118 // SSL Fails
198.54.131.124 // SSL Fails
172.86.105.244 // SSL Fails
38.180.135.173 // SSL Fails
38.180.61.208 // SSL Fails
38.180.91.185 // SSL Fails
37.1.209.202 // SSL Fails
172.86.106.231 // SSL Fails
38.180.25.215 // SSL Fails
185.196.10.129 // Web Exploits
65.49.1.84 // Scanning IP
45.159.231.124 // Web Exploits
38.180.91.21 // SSL Fails
38.180.61.52 // SSL Fails
4.156.21.82 // Scanning IP
103.153.77.181 // Web Exploits
34.19.127.201 // Web Exploits
34.19.127.215 // attempt exploits
34.19.127.181 // attempt exploits
93.91.119.151 // VPN Attempts
154.213.184.16 // Malicious Scanning
98.175.31.195 // Malicious IP
196.250.178.160 // Brute Force
222.161.242.146 // SSL Fails
121.202.204.100 // SSL Fails
183.249.1.72 // SSL Fails
34.68.34.71 // attempt exploits
165.154.172.88 // Scanning IP
104.18.9.38 // This is a local news website in Denmark http://thelocal.dk used so customers can check that they are consuming the Blacklist correctly.
103.226.248.206 // Web Exploits
149.22.94.37 // Fortigate Vuln CVE-2024-55591
37.19.196.65 // Fortigate Vuln CVE-2024-55591
155.133.4.175 // Fortigate Vuln CVE-2024-55591
87.249.138.47 // Fortigate Vuln CVE-2024-55591
45.55.158.47 // Fortigate Vuln CVE-2024-55591
82.147.88.107 // SSL Fails
31.58.141.189 // SSL Fails
45.89.244.133 // SSL Fails
95.215.204.146 // SSL Fails
185.92.182.99 // SSL Fails
82.147.88.133 // SSL Fails
195.211.124.207 // SSL Fails
82.147.88.90 // SSL Fails
104.254.90.243 // SSL Fails
82.147.88.89 // SSL Fails
82.147.88.87 // SSL Fails
193.46.255.0/24 // SSL Fails
147.45.47.0/24 // SSL Fails
185.92.183.92 // SSL Fails
46.8.225.109 // SSL Fails
217.138.195.27 // SSL Fails
208.77.22.212 // SSL Fails
64.42.179.51 // SSL Fails
193.176.158.83 // SSL Fails
185.92.182.143 // SSL Fails
185.92.180.167 // SSL Fails
198.54.130.28 // SSL Fails
173.249.217.38 // SSL Fails
192.145.126.115 // SSL Fails
46.8.78.12 // SSL Fails
45.159.208.151 // SSL Fails
46.8.226.109 // SSL Fails
45.156.25.248 // Brute Force
82.147.88.23 // SSL Fails
46.8.64.173 // SSL Fails
194.113.37.190 // SSL Fails
193.43.72.212 // SSL Fails
193.107.93.5 // SSL Fails
193.107.93.135 // SSL Fails
193.107.92.207 // SSL Fails
193.107.92.205 // SSL Fails
185.159.128.71 // SSL Fails
109.248.160.181 // SSL Fails
193.107.92.203 // SSL Fails
2.58.47.203 // SSL Fails
184.75.221.59 // SSL Fails
184.75.221.43 // SSL Fails
184.75.221.180 // SSL Fails
64.42.179.35 // SSL Fails
184.75.223.227 // SSL Fails
45.152.114.22 // SSL Fails
184.75.223.195 // SSL Fails
217.151.98.168 // SSL Fails
193.107.93.129 // SSL Fails
89.238.150.43 // SSL Fails
194.116.215.247 // SSL Fails
204.8.98.65 // SSL Fails
104.193.135.243 // SSL Fails
184.75.221.211 // SSL Fails
184.75.221.171 // SSL Fails
184.75.221.195 // SSL Fails
104.254.90.203 // SSL Fails
184.75.221.163 // SSL Fails
193.107.93.152 // SSL Fails
146.70.61.139 // SSL Fails
84.39.116.180 // SSL Fails
146.70.61.147 // SSL Fails
89.249.74.213 // SSL Fails
84.39.117.57 // SSL Fails
89.249.74.218 // SSL Fails
146.70.61.131 // SSL Fails
82.147.84.0/23 // SSL Fails
193.107.93.0/24 // SSL Fails
193.107.92.0/24 // SSL Fails
92.255.57.73 // SSL Fails
141.98.101.133 // SSL Fails
217.151.98.163 // SSL Fails
217.138.195.19 // SSL Fails
184.75.223.235 // SSL Fails
64.42.179.43 // SSL Fails
109.206.236.7 // SSL Fails
193.107.93.234 // SSL Fails
109.206.236.14 // SSL Fails
146.185.239.72 // Russian IP - login failed
147.45.47.204 // Russian IP - login failed
147.45.47.218 // Russian IP - ssl failed
87.121.86.36 // Credential Stuffing
8.34.210.52 // Web Exploits
8.34.210.54 // Web Exploits
83.222.191.146 // Web Exploits
80.64.30.169 // Brute Force
34.19.127.197 // Web Exploits
199.195.248.205 // Web Exploits
92.114.59.139 // Web Exploits
66.240.236.109 // Scanning IP
34.19.116.52 // attempt exploits
189.44.61.166 // network connection detected
218.207.25.249 // Web Exploits
92.63.197.55 // failure audit: an account failed to log on
185.156.73.24 // failure audit: an account failed to log on
185.156.73.69 // failure audit: an account failed to log on
139.5.1.255 // Web Exploits
92.63.197.69 // failure audit: an account failed to log on
91.224.92.18 // Web Exploits
34.68.34.80 // attempt exploits
45.190.253.64 // TCP Flooding
85.237.57.200 // Brute Force
31.13.224.63 // SSL Fails
95.153.241.43 // Brute Force
5.32.177.24 // Brute Force
147.235.97.158 // Brute Force
95.79.108.51 // Brute Force
187.237.47.214 // Brute Force
200.35.54.73 // Brute Force
216.194.174.27 // Brute Force
50.74.136.134 // Brute Force
213.136.80.106 // web Exploits
170.84.185.228 // web Exploits
216.10.250.218 // web Exploits
38.222.120.173 // web Exploits
190.104.199.167 // web Exploits
104.207.45.180 // web Exploits
128.14.216.246 // web Exploits
212.96.69.182 // web Exploits
94.21.161.91 // web Exploits
84.54.71.165 // web Exploits
156.228.97.76 // web Exploits
186.90.88.115 // web Exploits
156.228.171.211 // web Exploits
45.160.89.118 // web Exploits
154.213.203.5 // web Exploits
85.159.208.197 // Prob Port 179
156.228.80.218 // Brute Force
156.228.91.9 // Brute Force
156.228.84.22 // Brute Force
104.207.48.8 // SSL Fails
104.207.59.195 // SSL Fails
112.98.179.132 // Brute Force
64.52.80.94 // Hosting Meduza Stealer Panel
194.59.30.192 // Hosting Meduza Stealer Panel
147.45.44.216 // Hosting Meduza Stealer Panel
31.192.232.119 // Hosting Fake Agreement
172.86.109.138 // SSL Fails
172.86.110.3 // SSL Fails
50.114.94.51 // SSL Fails
193.56.116.57 // SSL Fails
64.64.116.8 // SSL Fails
91.193.232.79 // SSL Fails
185.238.231.163 // SSL Fails
104.234.225.5 // SSL Fails
216.73.160.119 // SSL Fails
199.101.192.82 // SSL Fails
167.88.169.34 // SSL Fails
172.86.109.203 // SSL Fails
172.86.109.194 // SSL Fails
216.21.13.15 // DGA - lyoztkhgdpwycx[.]com
216.21.13.14 // DGA - lyoztkhgdpwycx[.]com
156.233.72.26 // network connection detected
45.169.173.81 // network connection detected
142.251.2.27 // Testing the Blacklist
173.194.202.27 // Testing the Blacklist
142.251.10.27 // Testing the Blacklist
185.156.73.62 // failure audit: an account failed to log on
185.156.73.59 // failure audit: an account failed to log on
92.63.197.62 // failure audit: an account failed to log on
92.63.197.59 // failure audit: an account failed to log on
147.45.112.103 // failure audit: an account failed to log on
147.45.112.106 // failure audit: an account failed to log on
147.45.112.102 // failure audit: an account failed to log on
222.189.163.82 // Exchange probing
62.173.140.238 // network connection detected
45.137.22.45 // network connection detected
157.230.245.252 // Secrets Digging (.env)
18.236.71.93 // Suspicious EC2 Traffic