79[.]135[.]105[.]208

Posts referencing this indicator

• Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities

  Attacker IP that downloaded the Nim-based backdoor

  2026-05-14