SCARD

Suspicious activity by IP address 20.197.39.148

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:13:13 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.197.39.148

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 148
ET INFO WinRM wsman Access - Possible Lateral Movement 148

Detailed activity by IP address 20.197.39.148

Timestamp Description Protocol Destination Port
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:09:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:09:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:09:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:09:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:57:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:57:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:57:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:48:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:48:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:48:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:48:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:56:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:56:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:56:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:32:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:32:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:32:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:32:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:49:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:49:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:32:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:24:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:24:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:24:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:24:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:51:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:51:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:51:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:51:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:21:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:21:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:21:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:21:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:21:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:50:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:50:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:50:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:50:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:53:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:53:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:14:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:14:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:14:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:14:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:52:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:52:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:52:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:52:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:33:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:33:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:33:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:33:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 09:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 09:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 09:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 09:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:39:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:39:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:39:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:39:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 21:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 21:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 21:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 21:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 19:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 19:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:34:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:34:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:34:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:34:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 11:43:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:43:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:43:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 11:43:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 09:18:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 09:18:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 09:18:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 09:18:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top