SCARD

Suspicious activity by IP address 101.126.145.49

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:18:56 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 101.126.145.49

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 123
ET INFO WinRM wsman Access - Possible Lateral Movement 123

Detailed activity by IP address 101.126.145.49

Timestamp Description Protocol Destination Port
2026-07-06 10:18:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:18:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:18:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:18:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:35:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:35:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:35:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:35:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:57:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:35:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:35:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:35:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:35:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:40:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:40:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:20:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:00:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:22:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:22:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:22:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:22:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:28:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:28:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:59:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:11:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:11:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:11:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:11:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:22:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:22:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:22:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:22:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:10:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:10:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:10:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:10:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:03:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:03:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:03:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:03:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:03:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:03:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:03:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:03:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:30:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:30:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:30:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:30:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:53:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:53:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top