Demo
Scenario:
CRITICAL: Score 13 & 12 High threats — C2 beacon UNLOGGED BY FIREWALL detected on wire

104.26.10.228 United States

Suspicious / Score
Low 2
First seen
2026-10-29T20:45:52+00:00
Last seen
2026-10-30T10:00:52+00:00
Source query
02-Lange_Connections
Country / City
United States / San Francisco
ISP / Org / ASN
Cloudflare / Cloudflare, Inc. / AS13335 Cloudflare, Inc.
Hosting / Proxy
1 / 0
Prior DNS Resolution
Yes
Unlogged by Firewall
No
Open ports
80,443
Tags
cdn
Abuse score
0
VT malicious
0
Enriched at
2026-10-30T10:00:52+00:00

Detection Rule History

Detection Rule First Detected Last Detected Hit Count Kibana Link
02-Lange_Connections 2026-10-29T20:45:52+00:00 2026-10-29T20:45:52+00:00 1

Internal Hosts Contacting this IP

Internal IP Has Agent? Prior DNS Resolve? Last Contact Time
10.5.20.80 No Yes 2026-10-30T10:00:52+00:00

Comment