SCARD

Suspicious activity by IP address 20.109.157.99

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:01:33 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.109.157.99

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 182
ET INFO WinRM wsman Access - Possible Lateral Movement 182
ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound) 1

Detailed activity by IP address 20.109.157.99

Timestamp Description Protocol Destination Port
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:32:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:32:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:32:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:32:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:37:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:37:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:37:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:37:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:38:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:38:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:38:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:38:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:54:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:54:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:42:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:12:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:12:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:12:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:12:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:12:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:12:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:12:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:12:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:56:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:56:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:56:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:56:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:35:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:35:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:35:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:35:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:21:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:21:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:21:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:21:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:32:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:32:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:32:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:32:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:51:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:51:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:51:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:51:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:31:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:31:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:31:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:31:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 04:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 04:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 04:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:32:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:32:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:32:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:32:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:20:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 19:20:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:20:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:20:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 15:55:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 15:55:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:55:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 15:55:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:46:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:46:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:46:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:46:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:58:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:58:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:58:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:58:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:53:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:53:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:53:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:53:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:21:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:21:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-28 08:17:56 ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound) TCP 3389

 

Back to top