SCARD

Suspicious activity by IP address 103.143.207.31

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:38:44 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.143.207.31

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 112
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 112

Detailed activity by IP address 103.143.207.31

Timestamp Description Protocol Destination Port
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:04:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:04:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:04:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:04:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:04:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:04:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:04:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:04:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:54:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:54:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:54:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:54:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:39:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:38:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:38:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:38:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:38:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:10:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:10:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:44:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:44:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:43:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:43:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:23:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:23:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:23:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:23:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:45:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:45:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:45:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:45:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:14:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:14:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:56:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:43:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:43:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:43:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:43:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top