LIVE · 14m

TRIAGE & INVESTIGATION

SECOPS

Security-ops queue over the live fused alert streams — probe/outage verdicts & IOC/attack events, severity-ranked. Select an alert to investigate: raw payload, telemetry, outage-vs-vantage verification, and IOC enrichment. Read-only console; escalation/isolation is the private incident plane.

Alert queue

ALERT_QUEUE

sev · source · verdict live

CRITICAL DEFCON 14m

[DEFCON 2] DDoS Origin + Active Threat Feed Signal

CRITICAL DEFCON 14m

[DEFCON 1] Nation-State Network Activity

CRITICAL FEODO C2 24m

LIVE C2: 50.16.16.211:443 (QakBot)

CRITICAL DEFCON 32m

Mass withdrawal burst: 85 routes

CRITICAL C2INTEL 49m

Cobaltstrike: 101.37.236.20

CRITICAL C2INTEL 49m

Cobaltstrike: 101.33.225.32

CRITICAL C2INTEL 51m

Cobaltstrike: 101.201.103.158

CRITICAL C2INTEL 51m

Cobaltstrike: 101.200.193.211

CRITICAL C2INTEL 52m

Cobaltstrike: 101.126.10.34

CRITICAL C2INTEL 54m

Cobaltstrike: 1.94.65.9

CRITICAL FEODO C2 54m

LIVE C2: 50.16.16.211:443 (QakBot)

CRITICAL C2INTEL 54m

Cobaltstrike: 1.15.76.39

CRITICAL IODA 1h

Odido -- Netherlands — ping-slash24 critical

CRITICAL IODA 1h

TELPOWER-AS-IN -- India — ping-slash24 critical

CRITICAL IODA 1h

INTERNETBOLAGET -- Sweden — ping-slash24 critical

CRITICAL IODA 1h

GTPL-AS-AP -- India — ping-slash24 critical

CRITICAL IODA 1h

INTERNETBOLAGET -- Sweden — ping-slash24 critical

CRITICAL IODA 1h

GTPL-AS-AP -- India — ping-slash24 critical

CRITICAL FEODO C2 1h

LIVE C2: 50.16.16.211:443 (QakBot)

CRITICAL IODA 1h

PUBLIC-DOMAIN-REGISTRY -- India — ping-slash24 critical

CRITICAL IODA 1h

PUBLIC-DOMAIN-REGISTRY -- India — ping-slash24 critical

CRITICAL IODA 1h

HATHWAY-NET-AP -- India — ping-slash24 critical

CRITICAL IODA 1h

RELIANCEJIO-IN -- India — ping-slash24 critical

CRITICAL IODA 1h

RELIANCEJIO-IN -- India — ping-slash24 critical

CRITICAL C2INTEL 1h

Cobaltstrike: 101.37.236.20

CRITICAL C2INTEL 1h

Cobaltstrike: 101.33.225.32

CRITICAL C2INTEL 1h

Cobaltstrike: 101.201.103.158

CRITICAL C2INTEL 1h

Cobaltstrike: 101.126.10.34

CRITICAL C2INTEL 1h

Cobaltstrike: 1.94.65.9

CRITICAL FEODO C2 1h

LIVE C2: 50.16.16.211:443 (QakBot)

CRITICAL C2INTEL 1h

Cobaltstrike: 1.15.76.39

CRITICAL FEODO C2 2h

LIVE C2: 50.16.16.211:443 (QakBot)

CRITICAL IODA 2h

UCSB-NET-AS -- United States — ping-slash24 critical

CRITICAL IODA 2h

UCSB-NET-AS -- United States — ping-slash24 critical

CRITICAL IODA 2h

UCSB-NET-AS -- United States — ping-slash24 critical

CRITICAL C2INTEL 2h

Cobaltstrike: 101.37.236.20

CRITICAL C2INTEL 2h

Cobaltstrike: 101.33.225.32

CRITICAL C2INTEL 2h

Cobaltstrike: 101.201.103.158

CRITICAL C2INTEL 2h

Cobaltstrike: 101.200.193.211

CRITICAL C2INTEL 2h

Cobaltstrike: 101.126.10.34

CRITICAL C2INTEL 2h

Cobaltstrike: 1.94.65.9

CRITICAL IPSUM 3h

IPsum: 16.5.0.241 (score 9/10+)

CRITICAL IODA 3h

AS59815 (TRK-METRO-AS) — ping-slash24 critical

CRITICAL IODA 3h

DEC-AS -- Ukraine — ping-slash24 critical

CRITICAL IODA 4h

KIRZ-AS-TH -- Thailand — ping-slash24 critical

CRITICAL IODA 5h

AS31133 (MF-MGSM-AS) — ping-slash24 critical

CRITICAL IODA 5h

AS51812 (KTVS-AS) — ping-slash24 critical

CRITICAL IODA 5h

ROSTOV-AS -- Russian Federation — ping-slash24 critical

CRITICAL DEFCON 6h

[DEFCON 2] DDoS Origin + Active Threat Feed Signal

CRITICAL IODA 6h

MEGAFON-AS -- Lipetsk — ping-slash24 critical

CRITICAL IODA 6h

TCI -- Markazi — ping-slash24 critical

CRITICAL HIBP 6h

Breach: LimeLeads (17838k accounts)

CRITICAL HIBP 6h

Breach: LimeLeads (17838k accounts)

CRITICAL IODA 7h

AS48031 (XServer) — bgp critical

CRITICAL DEFCON 7h

[DEFCON 1] Nation-State Network Activity

CRITICAL IODA 7h

AS34879 (CCT-AS) — bgp critical

CRITICAL FEODO C2 8h

LIVE C2: 50.16.16.211:443 (QakBot)

CRITICAL C2INTEL 8h

Cobaltstrike: 1.15.76.39

CRITICAL DEFCON 8h

Mass withdrawal burst: 483 routes

CRITICAL IODA 8h

AS49120 (GORSET-AS) — ping-slash24 critical

CRITICAL IODA 8h

NETCOM-R-AS -- Russian Federation — ping-slash24 critical

CRITICAL IODA 8h

GORSET-AS -- Russian Federation — ping-slash24 critical

CRITICAL IODA 8h

NETCOM-R-AS -- Moskva — ping-slash24 critical

CRITICAL IODA 8h

AS49531 (NETCOM-R-AS) — ping-slash24 critical

CRITICAL C2INTEL 9h

Cobaltstrike: 101.33.225.32

CRITICAL IPSUM 9h

IPsum: 16.5.0.238 (score 9/10+)

CRITICAL C2INTEL 9h

Cobaltstrike: 101.201.103.158

CRITICAL IPSUM 9h

IPsum: 16.5.0.234 (score 9/10+)

CRITICAL DEFCON 9h

[DEFCON 1] Nation-State Network Activity

CRITICAL IODA 11h

AS150452 (LANDUPS-AS-AP) — bgp critical

CRITICAL C2INTEL 11h

Cobaltstrike: 1.15.76.39

CRITICAL IODA 11h

CT-CHONGQING-MAN2-AP -- Chongqing — ping-slash24 critical

CRITICAL IODA 11h

AS141739 (CT-CHONGQING-MAN2-AP) — ping-slash24 critical

CRITICAL DEFCON 12h

[DEFCON 1] Nation-State Network Activity

CRITICAL DEFCON 12h

Mass withdrawal burst: 86 routes

CRITICAL IODA 12h

AS141739 (CT-CHONGQING-MAN2-AP) — ping-slash24 critical

CRITICAL IODA 13h

AS37340 (Spectranet) — ping-slash24 critical

CRITICAL DEFCON 13h

[DEFCON 2] DDoS Origin + Active Threat Feed Signal

CRITICAL IODA 16h

AS204490 (ASKONTEL) — bgp critical

CRITICAL DEFCON 16h

Mass withdrawal burst: 657 routes

INVESTIGATION

Investigation ID

SIG-PEVNNC

Status

OUTAGE

CRITICAL IODA · US 2h ago

Raw payload

UCSB-NET-AS -- United States — ping-slash24 critical IODA critical outage signal on UCSB-NET-AS -- United States (University of California, Santa Barbara), AS131, US. 109 of 272 /24 blocks responding to active probes (40% of baseline, 163 /24s dark). Datasource: ping-slash24.

Telemetry timeline · related activity

12:20:00Z

UCSB-NET-AS -- United States — ping-slash24 critical

12:20:00Z

UCSB-NET-AS -- United States — ping-slash24 critical

19:20:00Z

ORLANDOTELCO -- United States — ping-slash24 critical

↗ US probes ↗ AS131 routing ↗ signal fusion

Escalate / isolate actions live in the private incident plane (per-tenant).

IOC_ENRICHMENT

No network indicator on this alert — nothing to enrich.

Geo: US