SCARD

Suspicious activity by IP address 20.2.220.152

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:02:51 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.2.220.152

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 190
ET INFO WinRM wsman Access - Possible Lateral Movement 190

Detailed activity by IP address 20.2.220.152

Timestamp Description Protocol Destination Port
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:42:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:42:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:42:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:42:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:37:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:37:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:37:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:37:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:15:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:15:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:15:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:15:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:49:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:41:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:06:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:06:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:42:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:42:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:42:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:42:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:48:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:48:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:48:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:48:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:42:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:33:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:33:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:47:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:03:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:03:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:03:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:03:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:05:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:05:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:05:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:05:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:53:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:53:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:28:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 00:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 00:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 00:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 00:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:25:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:25:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:25:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:25:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:40:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:40:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:40:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:40:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:46:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:46:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:46:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:46:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 20:33:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 20:33:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 20:33:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:33:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:53:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 04:53:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:53:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:53:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 02:21:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 02:21:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 02:21:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 02:21:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 16:51:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 16:51:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 16:51:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 16:51:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:04:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:04:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:04:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:04:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:35:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:35:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:35:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:35:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:08:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:08:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:08:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:08:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 02:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 02:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top