25.1.2.2

IP Address

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

October 13, 2026

Last Seen

October 13, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Context indicates it is a version number, not an IP address

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

Ivanti Connect Secure Zero-Day Exploited: Urgent Patching Required

4h ago·14 sources

Related Articles (3)

Etr Ivanti Connect Secure Zero Day Exploited In The Wild Cve 2026 104935

www.rapid7.com·3h ago

Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Frequently Asked Questions About the Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)

Watchtowr·7h ago

Related Entities

Zero-day Exploit Ivanti Rapid7 Volexity CISA CVE-2026-104935 CWE-290 - Authentication Bypass by Spoofing T1059 - Command and Scripting Interpreter Ivanti Connect Secure