130.12.182[.]216IP address
Reported by 1 independent source · first reported by SOCRadar · last reported
Last reported 28 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine’s Defense Industry“… Texas (129.146.87.174, since cleaned), a secondary node in Slovenia branded internally as “Global Outreach Engine / EMPIRE ENGINE” (130.12.182[.]216, taken down, July 23, 2026), and several webshell and tunnel relays running Godzilla ASPX, suo5, r57, reGeorg, and Neo-reGeorg.”
Indicators reported together
named in the same reports- 129.146.87[.]174in 1 report
- db848d928afe4d2284a35bb112720e6fin 1 report
- 46.8.236[.]121in 1 report
- 24.106.41[.]154in 1 report
- 46.44.231[.]122in 1 report
- 213.96.47[.]74in 1 report
- 71.245.184[.]24in 1 report
- b2d46bfc25df83dd…c46257d13be8in 1 report
- e27f5b057a0de14ab32fb9e7462f04cfin 1 report
- 65d96bd51d8a1cbd…e9bd64103992in 1 report
- 3ba4e04fdcf73c267b89d91fc90f836fin 1 report
Copy these 11 indicators · defanged
Also named with it: CVE-2025-49113, CVE-2026-63030, CVE-2022-1040, CVE-2023-46747, CVE-2024-55591, CVE-2025-31324, CVE-2025-25257
Thanks — we review every report.