SCARD

Suspicious activity by IP address 20.86.140.239

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 09:45:09 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.86.140.239

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 152
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 152

Detailed activity by IP address 20.86.140.239

Timestamp Description Protocol Destination Port
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:36:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:36:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:36:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:36:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:27:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:27:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:27:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:27:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:29:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:29:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:29:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:29:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:06:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:36:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:36:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:04:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:04:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:04:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:04:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:30:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:09:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 01:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 01:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 01:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 01:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:55:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:55:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:55:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:55:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:46:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:46:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:46:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:46:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:20:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:20:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:20:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:20:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:43:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:43:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:43:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:43:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 21:27:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 21:27:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 21:27:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 21:27:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:45:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:45:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 19:45:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 19:45:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 15:36:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 15:36:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:36:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:36:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:28:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:28:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:28:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:28:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 08:49:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 08:49:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 08:49:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 08:49:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:22:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:22:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:22:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:22:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:41:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:41:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:41:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:41:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:37:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:37:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:37:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:37:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:15:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 19:15:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:15:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:15:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:11:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:11:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:11:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:11:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 15:56:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 15:56:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:56:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:56:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 14:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 14:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 14:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 14:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:41:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:41:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:41:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 11:41:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:10:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:10:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:10:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:10:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:09:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:09:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:09:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:09:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top