Ivanti Connect Secure Admin Interface Probe for 2026-10-19
Last Updated: 00:00 UTC
/dana-admin/, /dana-cached/, and /dana-na/ are URL prefixes unique to Ivanti Connect Secure (formerly Pulse Secure). CVE-2024-21887 (command injection) and CVE-2023-46805 (authentication bypass) are chained for unauthenticated RCE without any prior credentials.
CVE References
MITRE ATT&CK
Tactic: Initial Access (TA0001)
Technique: T1190 — Exploit Public-Facing Application
Observed URIs
Attackers by Country
| Australia | 5 | 62.5% |
| Sweden | 3 | 37.5% |
IP Address : ASN : City/Provider
-
172.105.177.106 : AS63949 Akamai Connected Cloud : Sydney
-
172.105.184.153 : AS63949 Akamai Connected Cloud : Sydney
-
172.236.35.120 : AS63949 Akamai Connected Cloud : Melbourne
-
194.195.251.204 : AS63949 Akamai Connected Cloud : Sydney
-
198.167.197.162 : AS39287 Materialism s.r.l. : Sweden
-
198.167.197.194 : AS39287 Materialism s.r.l. : Sweden
-
198.167.197.204 : AS39287 Materialism s.r.l. : Sweden
-
45.79.237.51 : AS63949 Akamai Connected Cloud : Sydney