ctrlINT What the industry said about every indicator, with the quote

78.29.48[.]29IP address

Reported by 1 independent source · first reported by Huntress · last reported

Last reported 6 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “Those logs showed that on April 15, 2026 at 13:44:19 UTC, a threat actor initiated an SSL VPN connection to a FortiGate firewall from 78.29.48[.]29, geolocated to the Russian Federation, using credentials for the victim user account.”

    HuntressVendor
    Nightmare-Eclipse Tooling Seen in Real-World Intrusion

Indicators reported together

named in the same reports
Copy these 3 indicators · defanged

Also named with it: CVE-2026-33825

Thanks — we review every report.

Report a wrong value
What is wrong with 78.29.48[.]29 here?
No account needed. We do not store your IP address.