25.1.1.1

IP Address

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

October 13, 2026

Last Seen

October 13, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Context indicates it is a version number, not an IP address

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

Ivanti Connect Secure Zero-Day Exploited: Urgent Patching Required

4h ago·14 sources

Related Articles (3)

Ivanti Urges Emergency Patching as Connect Secure Zero

Linkedin·4h ago

Frequently Asked Questions About the Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)

Watchtowr·7h ago

Ivanti warns of Connect Secure zero

Bleepingcomputer·8h ago

Related Entities

UNC5221 Zero-day Exploit China CVE-2026-104935 CWE-287 - Improper Authentication CWE-918 - Server-Side Request Forgery (ssrf)CWE-78 - OS Command Injection T1003 - OS Credential Dumping T1021 - Remote Services T1059 - Command and Scripting Interpreter T1068 - Exploitation for Privilege Escalation Connect Secure