Demo
Scenario:
CRITICAL: Score 13 & 12 High threats — C2 beacon UNLOGGED BY FIREWALL detected on wire

185.190.140.12 Netherlands

Suspicious / Score
Medium 8
First seen
2026-10-29T12:45:52+00:00
Last seen
2026-10-30T08:45:52+00:00
Source query
08-UDP_Beacons
Country / City
Netherlands / Amsterdam
ISP / Org / ASN
Creanova / Creanova Hosting / AS49981 Creanova
Hosting / Proxy
1 / 0
Prior DNS Resolution
No
Unlogged by Firewall
No
Open ports
53,123
Tags
<missing>
Abuse score
45
VT malicious
0
Enriched at
2026-10-30T08:45:52+00:00

Detection Rule History

Detection Rule First Detected Last Detected Hit Count Kibana Link
08-UDP_Beacons 2026-10-29T12:45:52+00:00 2026-10-29T12:45:52+00:00 1

Internal Hosts Contacting this IP

Internal IP Has Agent? Prior DNS Resolve? Last Contact Time
10.5.20.42 Yes No 2026-10-30T08:45:52+00:00

Comment