Glenn 📎

🥜 & #threatintel - Thanks to Horizon3, we pushed a tag out today for CitrixBleed 2 CVE-2025-5777 and are backfilling. Currently, we see 233 hits starting on July 1 from:
64.176.50[.]109
38.154.237[.]100
102.129.235[.]108
121.237.80[.]241
45.135.232[.]2

Follow along here: https://viz.greynoise.io/tags/citrixbleed-2-cve-2025-5777-attempt?days=10

GreyNoise Visualizer | GreyNoise Visualizer

Jul 7 at 9:56pmWeb
Show threadTom6d ago
@ntkramer the IPs you’ve listed no longer show on a 90 day search. Would be good to understand why they no longer show as tagged
Show threadGlenn 📎5d ago
@Tom_From_The_UK
That’s due a technical limitation on the backend for this signature. We’re going to work on fixing that in the future.
Show threadTom5d ago
@ntkramer thank you. Awesome news and really useful to know the context. Keep up the brilliant work ❤️