SCARD

Suspicious activity by IP address 20.40.47.162

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:00:07 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.40.47.162

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 130
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 130

Detailed activity by IP address 20.40.47.162

Timestamp Description Protocol Destination Port
2026-07-06 10:00:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:00:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:00:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:00:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:00:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:34:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:34:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:34:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:34:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:37:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:37:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:37:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:37:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:00:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:00:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:00:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:00:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:27:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:27:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:27:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:54:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:54:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:12:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:12:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:12:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:12:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:34:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:34:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:34:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:34:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:15:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:15:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:15:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:15:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:40:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:40:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:40:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:40:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:30:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:10:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:22:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:22:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:22:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:22:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:13:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:13:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:13:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:13:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:33:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:33:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:33:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:33:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 20:44:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:44:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 20:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 17:09:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 17:09:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 17:09:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 17:09:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:29:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:29:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 15:29:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:29:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:47:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:47:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:47:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:47:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 22:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:18:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:18:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:18:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:18:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:24:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:24:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:24:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:24:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:27:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:27:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:27:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:27:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:28:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:28:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:28:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:28:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top