SCARD

Suspicious activity by IP address 103.60.211.106

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 12 Aug 2026 04:28:10 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 103.60.211.106

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 444
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 444

Detailed activity by IP address 103.60.211.106

Timestamp Description Protocol Destination Port
2026-08-12 04:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:32:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:35:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:00:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:00:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:00:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:00:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:09:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:09:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:09:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:09:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:09:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:09:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:09:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:09:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:13:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:24:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:24:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:24:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:24:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:24:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:24:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:24:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:24:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:19:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:40:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:08:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:42:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:23:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:01:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:38:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:18:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:09:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:26:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:26:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:26:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:26:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:52:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:07:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:52:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:52:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:52:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:52:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:22:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:22:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:22:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:22:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:07:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:30:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:48:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:55:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:37:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:39:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:39:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:39:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:39:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:39:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:39:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:39:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:39:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:32:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:08:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:49:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:05:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top