SCARD

Suspicious activity by IP address 20.7.34.105

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:04:48 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.7.34.105

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 156
ET INFO WinRM wsman Access - Possible Lateral Movement 156

Detailed activity by IP address 20.7.34.105

Timestamp Description Protocol Destination Port
2026-07-06 11:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:25:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:25:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:25:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:25:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:21:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:21:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:21:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:21:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:13:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:13:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:13:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:13:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:06:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:06:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:06:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:06:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:47:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:47:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:47:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:47:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:37:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:37:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:37:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:37:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:53:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:28:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:28:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:07:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:07:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:07:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:07:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 20:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:09:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:09:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:09:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:09:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:37:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:37:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:17:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:17:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:07:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:07:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:07:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:07:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 08:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 08:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 08:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 08:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 01:17:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 01:17:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:17:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:17:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 00:01:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 00:01:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 00:01:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 00:01:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:20:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:20:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 22:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 19:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 19:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 15:39:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:39:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 14:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 14:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 14:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 14:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:25:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:25:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:25:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:25:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:48:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:48:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:48:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:48:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 01:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 01:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 01:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 01:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top