Forensia CTI Core

Verdict

KNOWN MALWARE — Nadmesh

What is this: Malware ip — Nadmesh. Hosted on AS402253 SKN Subnet & Telecom Ltd.
Should you care: Yes — Nadmesh is known-malicious, attributed by name.
What to do: Block it.

What this is

IP indicator: 209.99.186.235

Botnet Analysis: A Product-Grade Threat for the AI Service Era

Exposure

Open ports, software & known CVEs · via Shodan InternetDB

Open ports (4)

22 SSH443 HTTPS90909999

Software

openssh 9.6p1nginxubuntu linux

scanner · self-signed

Threat detail

Exploitation status and malware-family attribution from stored fields.

exploitation: unknown

Graph preview

Neighborhood topology — open the graph for interactive pivots.

Loading graph…

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

Related alerts, reports, and entities
Structured pivots from local graph context.
Open intel graph (neighborhood)
See edges, pivots, and corroboration at a glance.
Investigation canvas
Full inspector with neighbor expansion.