Demo
Scenario:
CRITICAL: Score 13 & 12 High threats — C2 beacon UNLOGGED BY FIREWALL detected on wire

45.33.23.111 United States

Suspicious / Score
High 13
First seen
2026-10-29T20:45:52+00:00
Last seen
2026-10-30T10:40:52+00:00
Source query
01-Starke_Beacons 2 rules matched
Country / City
United States / Dallas
ISP / Org / ASN
Linode / Linode, LLC / AS63949 Linode, LLC
Hosting / Proxy
1 / 1
Prior DNS Resolution
Yes
Unlogged by Firewall
Yes
Open ports
80,443,8080
Tags
<missing>
Abuse score
85
VT malicious
0
Enriched at
2026-10-30T10:40:52+00:00

Detection Rule History

Detection Rule First Detected Last Detected Hit Count Kibana Link
04-Beacon_30d_2h_n12 2026-10-30T10:40:52+00:00 2026-10-30T10:40:52+00:00 1
01-Starke_Beacons 2026-10-29T20:45:52+00:00 2026-10-29T20:45:52+00:00 1

Internal Hosts Contacting this IP

Internal IP Has Agent? Prior DNS Resolve? Last Contact Time
10.5.20.80 No Yes 2026-10-30T10:40:52+00:00

Comment