Demo
Scenario:
CRITICAL: Score 13 & 12 High threats — C2 beacon UNLOGGED BY FIREWALL detected on wire

10.5.20.15

Linux Host Threat Score: 4.6
Back to Internal Hosts
Threat Score
4.6
IP Address
10.5.20.15
DNS Hostname
ws-engineering-01.corp.internal
NAT IP Address
43.6.94.20
OS Indicator
Linux
Open Ports
22 80 443
Elastic Agent
Yes (Installed)
First seen
2026-10-30T09:45:52+00:00
Last seen
2026-10-30T09:45:52+00:00

Port & OS Scan Diagnostics

{"scanner": "python-socket", "open_ports": [22, 80, 443], "os_hint": "Linux", "confidence": "High"}

Contacted External Threat IPs

External IP Country / City ISP / ASN C2 Score Suspicious Level Prior DNS Resolve? Last Contact Time
77.88.55.66 Russia / Moscow Yandex / AS13238 Yandex LLC 4 Low Yes 2026-10-30T09:45:52+00:00
195.154.122.37 France / Paris Scaleway / AS12876 Scaleway 4 Low No 2026-10-30T08:45:52+00:00
8.8.8.8 United States / Mountain View Google LLC / AS15169 Google LLC 0 Low Yes 2026-10-30T10:45:52+00:00
142.250.180.14 United States / Mountain View Google LLC / AS15169 Google LLC 0 Low Yes 2026-10-30T09:45:52+00:00