25.1.1.3

IP Address

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 31, 2026

Last Seen

November 3, 2026

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Mentioned as a version number in the context of software updates, not an IP address.

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (2)

Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in the Wild

20h ago·67 sources

Ivanti Connect Secure Vulnerabilities Exploited for Root Access

11h ago·4 sources

Related Entities

Zero-day Exploit Credential Stuffing CVE-2026-104935 CVE-2026-111357 CVE-2026-118527 CWE-434 - Unrestricted Upload Of File With Dangerous Type CWE-269 - Improper Privilege Management CWE-287 - Improper Authentication T1068 - Exploitation for Privilege Escalation T1078 - Valid Accounts T1110 - Brute Force T1190 - Exploit Public-Facing Application

25.1.1.3

IOC Validation

Pivot to external tools

Related Clusters (2)

Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in the Wild

Ivanti Connect Secure Vulnerabilities Exploited for Root Access

Related Articles (3)

Patch now! Ivanti updates security advisory for trio of exploited vulnerabilities in Connect ...

Patch Now! Ivanti updates security advisory for trio of exploited vulnerabilities in Connect ...

Warning: Actively Exploited Vulnerabilities in Ivanti Connect Secure, Patch Immediately!

Related Entities