SCARD

Suspicious activity by IP address 103.48.192.223

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 05 Jul 2026 14:19:30 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.48.192.223

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 128
ET INFO WinRM wsman Access - Possible Lateral Movement 128

Detailed activity by IP address 103.48.192.223

Timestamp Description Protocol Destination Port
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:54:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:54:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:54:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:54:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:26:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:11:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:11:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:11:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:11:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:26:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:26:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:26:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:26:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 00:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:07:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:07:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:07:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:07:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:08:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:08:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:11:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:11:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:17:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:17:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:17:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:17:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:04:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:04:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:04:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:04:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:03:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:03:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:22:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:22:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:22:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:22:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:23:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:23:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:23:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:23:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:20:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:20:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:20:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:20:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top