SCARD

Suspicious activity by IP address 103.111.68.42

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 15 Aug 2026 03:54:19 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.111.68.42

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 261
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 261

Detailed activity by IP address 103.111.68.42

Timestamp Description Protocol Destination Port
2026-08-15 03:54:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:54:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:35:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:35:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:43:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:43:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:43:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:56:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:15:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:15:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:15:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:15:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:15:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:15:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:15:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:15:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:05:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:05:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 03:02:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 03:02:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 03:02:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 03:02:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:58:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:58:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:58:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:58:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:12:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:52:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:14:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:22:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:22:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:22:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:22:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:22:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:22:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:22:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:22:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:14:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:14:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:14:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:16:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:16:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:16:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:16:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:48:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:48:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:48:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:48:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:10:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 00:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 00:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 00:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 00:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:32:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:32:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:32:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:32:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:33:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:33:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:33:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:33:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 20:47:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-07 20:47:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-07 20:47:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-07 20:47:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-07-20 20:39:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:39:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:39:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:39:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:07:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:07:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:58:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:58:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:58:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:58:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:56:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:56:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:56:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:56:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:54:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:54:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:54:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:54:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:11:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:11:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:11:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:11:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:06:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:06:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:06:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:06:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:41:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:41:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:12:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:12:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:12:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:12:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:41:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:00:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:47:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:47:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:47:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:47:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:12:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:12:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:12:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:12:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:11:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:27:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:27:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:27:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:27:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:25:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:25:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:24:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:24:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:24:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:24:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:38:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:38:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:38:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:38:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:31:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:45:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:45:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:45:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:45:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:41:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:41:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:41:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:41:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:41:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:41:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:41:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:41:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:02:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:05:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:05:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:05:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:05:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:41:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:41:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:41:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:41:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:18:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:18:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:18:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:18:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:30:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:30:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top