ctrlINT What the industry said about every indicator, with the quote

149.104.78[.]141IP address

Reported by 1 independent source · first reported by GreyNoise · last reported

Last reported 27 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “On 24 September 2026, a malicious cyber actor (MCA) used 149.104.78[.]141 to attempt zero-day exploitation against a Citrix NetScaler Gateway.”

    GreyNoiseVendor
    Swarming Against Citrix 0-Day Exploitation

Indicators reported together

named in the same reports
Copy these 2 indicators · defanged

Also named with it: CVE-2025-5777, CVE-2026-88771

Thanks — we review every report.

Report a wrong value
What is wrong with 149.104.78[.]141 here?
No account needed. We do not store your IP address.