SCARD

Suspicious activity by IP address 20.84.105.238

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 00:46:42 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.84.105.238

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 118
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 118

Detailed activity by IP address 20.84.105.238

Timestamp Description Protocol Destination Port
2026-07-06 00:46:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:46:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:46:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:46:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:33:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:33:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:33:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:33:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:21:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:21:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:21:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:21:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:45:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:01:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:06:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:12:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:12:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:12:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:12:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:46:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:00:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:00:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:00:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:00:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:43:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:43:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:46:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:46:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:46:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:46:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:16:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 15:16:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 15:16:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:16:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:19:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:19:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:19:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:19:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:15:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:15:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:15:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:15:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:54:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:54:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:54:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:54:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:08:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:08:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:08:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:08:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top