SCARD

Suspicious activity by IP address 104.208.73.137

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 05:30:29 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 104.208.73.137

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 242
ET INFO WinRM wsman Access - Possible Lateral Movement 242

Detailed activity by IP address 104.208.73.137

Timestamp Description Protocol Destination Port
2026-08-19 05:30:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:30:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:30:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:30:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:30:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:14:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:14:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:14:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:14:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:16:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:30:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:52:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:52:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:52:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:52:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:52:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:52:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:52:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:52:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:23:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:01:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:01:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:01:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:01:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:04:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:04:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:04:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:04:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:03:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:03:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:03:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:03:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:18:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:18:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:18:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:18:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:46:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:46:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:46:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:46:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:35:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:35:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:35:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:35:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:47:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:47:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:47:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:47:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:46:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:55:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:55:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:55:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:55:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:55:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:15:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:15:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:15:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:15:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:06:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:06:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:06:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:06:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:05:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:24:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:11:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:43:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:43:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:43:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:43:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:23:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:23:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:23:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:23:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:45:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:45:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:45:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:45:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:59:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:59:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:24:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 16:24:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:24:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 16:24:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:13:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:13:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:13:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:13:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 16:27:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 16:27:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 16:27:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 16:27:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 02:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 02:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 02:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 02:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 02:29:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:29:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:29:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 02:29:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top