SEC-0003-e

One observation, and where it came from.

View entity →

What was observed

infosecurity11d ago

198.51.100.74 is not in the backup infrastructure inventory

Where it came from

Source system: demo-scenario
Collector: demo
Query or scenario: INC-2026-0903
Entity: network_flow:ws-0148->198[.]51[.]100[.]74:8443
Observed: 11d ago

This observation is part of a written scenario. It did not come off a real network, and nothing on this deployment did.

Detail

as recorded

{
  "kind": "security",
  "detection_type": "not_backup_infrastructure",
  "principal": "ws-0148->198.51.100.74:8443",
  "source_address": null,
  "asset": null,
  "confidence": 0.99
}