SCARD

Suspicious activity by IP address 20.174.184.111

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:45:03 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.174.184.111

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 130
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 130

Detailed activity by IP address 20.174.184.111

Timestamp Description Protocol Destination Port
2026-07-06 10:45:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:32:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:32:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:32:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:32:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:20:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:20:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 12:46:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 12:46:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 12:46:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 12:46:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:00:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:00:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top