log[.]eventsDomain
Reported by 2 independent sources · first reported by Volexity · last reported
Last reported 10 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks“…guration and Log Collection: The actor targeted /home/etc/pulse/, /home/etc/, /home/*.cfg and /home/runtime, and pulled usernames from log[.]events.vc0 into /tmp/pu.txt”
-
A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days“Attempted username extraction from log[.]events.vc0 with results written to /tmp/pu.txt”
Indicators reported together
named in the same reports- 108.165.147[.]64in 2 reports
- 25.1.2[.]2in 1 report
- 25.1.1[.]2in 1 report
- 25.1.3[.]1in 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2026-104935
Thanks — we review every report.