SCARD

Suspicious activity by IP address 103.126.6.145

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 15 Aug 2026 03:11:14 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.126.6.145

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 400
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 400

Detailed activity by IP address 103.126.6.145

Timestamp Description Protocol Destination Port
2026-08-15 03:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:42:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:42:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:41:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:39:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:29:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:47:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:47:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:47:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:47:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:38:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:38:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:38:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:38:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:38:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:38:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:38:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:38:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:49:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:49:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:49:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:49:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:49:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:49:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:49:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:49:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:01:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:57:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:57:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:57:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:57:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:50:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:53:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:53:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:53:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:53:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:12:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:56:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:56:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:56:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:56:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:23:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:45:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:01:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:13:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:13:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:13:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:13:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:13:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:13:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:13:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:13:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:39:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:39:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:39:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:39:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:40:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:40:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:40:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:40:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:40:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:40:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:40:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:40:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:56:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:56:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:56:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:56:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:50:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:50:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:50:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:50:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:52:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 07:52:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:52:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:52:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:53:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:26:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:26:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:26:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:26:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:50:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:50:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:50:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:50:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:07:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:47:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:47:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:47:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:47:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:40:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:40:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:40:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:40:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:20:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:20:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:20:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:20:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:42:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:42:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:42:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:42:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:25:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:25:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:25:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:25:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top