SCARD

Suspicious activity by IP address 103.118.255.179

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:12:37 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.118.255.179

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 294
ET INFO WinRM wsman Access - Possible Lateral Movement 294

Detailed activity by IP address 103.118.255.179

Timestamp Description Protocol Destination Port
2026-08-19 19:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:52:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:49:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:15:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:33:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:56:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:56:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:56:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:56:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:19:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:59:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:59:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:11:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:11:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:11:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:11:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:11:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:33:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:33:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:33:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:33:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 07:45:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:45:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:45:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 07:45:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:50:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:50:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:50:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:50:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:21:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:16:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:16:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:16:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:16:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:02:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:02:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:02:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:02:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:54:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:54:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:27:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:08:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top