Skip to content
Bulwark Black Bulwark Black LLC
Latest
Jscrambler npm Compromise Shows Build Pipelines Need Runtime ControlsGhost Phishing Shows Why Email Security Must Follow the BrowserPakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic TargetsBad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority QueueFake Payment SDKs Show Why Dependency Risk Is Credential RiskCritical UniFi Flaws Put Network Control Planes Back in the Patch QueueVidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak ControlsADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity InfrastructureUAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay InfrastructureFortiBleed Shows Firewall Credentials Are Ransomware FuelNetNut and Popa Takedown Shows Residential Proxies Are Now Attack InfrastructureVect and TeamPCP Show Supply-Chain Credentials Are Ransomware FuelOusaban Shows Banking Trojans Are Learning to Hide From SandboxesNUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch Queue

Indicator of Compromise

12[.]8[.]0[.]0

IPv4 address Seen in 2 reports Watch this →

An IPv4 address observed in malicious infrastructure. Block or monitor it at the firewall. Shown defanged for safe viewing; use Copy live value for the functional form.

Included in the IPs feed (live, machine-readable).

Seen in these reports

General CTI · Jan 30, 2026

Ivanti Patches Two Critical EPMM Zero-Day Vulnerabilities Under Active Exploitation
General CTI · Jan 30, 2026

Ivanti EPMM Zero-Days Actively Exploited: Pre-Auth RCE via Bash Arithmetic Expansion

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

CVE-2026-1281 CVE-2026-1340 12[.]5[.]1[.]012[.]6[.]1[.]012[.]7[.]0[.]0 123aabf796106cfb2ab40cbbd43ba5b44fd937f1a5856e0a95640ba6f9d71843 forums[.]ivanti[.]comhelp[.]ivanti[.]comhxxps://forums[.]ivanti[.]com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_UShxxps://help[.]ivanti[.]com/mi/help/en_us/core/11[.]x/gsg/CoreGettingStarted/Configuring_LDAP_servers[.]htm
Browse all indicators → Machine-readable feeds → Extract IOCs from text →