Demo
Scenario:
CRITICAL: Score 13 & 12 High threats — C2 beacon UNLOGGED BY FIREWALL detected on wire

10.5.20.42

Windows Host Threat Score: 8.6
Back to Internal Hosts
Threat Score
8.6
IP Address
10.5.20.42
DNS Hostname
fileserver-hq.corp.internal
NAT IP Address
43.6.94.20
OS Indicator
Windows
Open Ports
445 139
Elastic Agent
Yes (Installed)
First seen
2026-10-30T09:45:52+00:00
Last seen
2026-10-30T09:45:52+00:00

Port & OS Scan Diagnostics

{"scanner": "python-socket", "open_ports": [445, 139], "os_hint": "Windows", "confidence": "High"}

Contacted External Threat IPs

External IP Country / City ISP / ASN C2 Score Suspicious Level Prior DNS Resolve? Last Contact Time
185.190.140.12 Netherlands / Amsterdam Creanova / AS49981 Creanova 8 Medium No 2026-10-30T08:45:52+00:00