194.11.246[.]78IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 13 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Tracking MuddyWater in Action: Infrastructure, Malware and Operations during 2025“The HTML body content on 194.11.246[.]78:443 is unique, and has 6 pivots, which reveals additional IPs and domains (body hash: 32d299b913d5b13109d6f6117051910f5e56e74ffc8a539ecdc931d1a558c77b and title: Coming Soon).”
Indicators reported together
named in the same reports- 40dead1e1d831076…5af71a9b5e05in 1 report
- filetransfer[.]ioin 1 report
- sync[.]comin 1 report
- 5f22f4c4fdb36c4f…7b9ef0b691c2in 1 report
- f782dfdc7ce624f9…561c8af13db0in 1 report
- hxxps://netivtech[.]org/registerin 1 report
- netivtech[.]orgin 1 report
- hxxps://netivtech[.]org/imalivein 1 report
- hxxps://netivtech[.]org/requestin 1 report
- hxxp://46.101.36[.]39:443/imalivein 1 report
- 46.101.36[.]39in 1 report
- hxxp://46.101.36[.]39/registerin 1 report
- hxxp://46.101.36[.]39:443/requestin 1 report
- hxxps://netivtech[.]org/rq13in 1 report
- hxxps://netivtech[.]org/adadin 1 report
- hxxps://netivtech[.]org/aq36in 1 report
- 162.255.119[.]28in 1 report
- www.netivtech[.]orgin 1 report
- 91.195.240[.]19in 1 report
- 104.21.81[.]7in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.