10.5.20.80
Windows Host Threat Score: 15.1- Threat Score
- 15.1
- IP Address
- 10.5.20.80
- DNS Hostname
- ws-finance-04.corp.internal
- NAT IP Address
- 43.6.94.20
- OS Indicator
- Windows
- Open Ports
- 445 135 3389
- Elastic Agent
- No Agent
- First seen
- 2026-10-30T09:45:52+00:00
- Last seen
- 2026-10-30T09:45:52+00:00
Port & OS Scan Diagnostics
{"scanner": "python-socket", "open_ports": [445, 135, 3389], "os_hint": "Windows", "confidence": "High"}
Contacted External Threat IPs
| External IP | Country / City | ISP / ASN | C2 Score | Suspicious Level | Prior DNS Resolve? | Last Contact Time |
|---|---|---|---|---|---|---|
| 45.33.23.111 | United States / Dallas | Linode / AS63949 Linode, LLC | 13 | High | Yes | 2026-10-30T10:40:52+00:00 |
| 193.37.212.44 | Russia / Moscow | M24 LLC / AS42424 M24 LLC | 12 | High | No | 2026-10-30T10:33:52+00:00 |
| 104.26.10.228 | United States / San Francisco | Cloudflare / AS13335 Cloudflare, Inc. | 2 | Low | Yes | 2026-10-30T10:00:52+00:00 |
| 8.8.8.8 | United States / Mountain View | Google LLC / AS15169 Google LLC | 0 | Low | Yes | 2026-10-30T10:45:52+00:00 |