SCARD

Suspicious activity by IP address 112.196.54.182

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 15 Aug 2026 03:03:12 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 112.196.54.182

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 505
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 505

Detailed activity by IP address 112.196.54.182

Timestamp Description Protocol Destination Port
2026-08-15 03:03:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:03:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:03:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:03:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:10:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:33:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:22:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:33:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:10:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:51:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:51:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:51:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:51:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:47:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:47:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:47:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:47:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:47:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:47:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:40:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:40:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:40:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:40:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:35:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:35:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:35:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:35:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:38:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:38:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:38:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:38:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:19:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:52:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:51:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:51:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:39:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:39:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:03:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:03:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:58:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:58:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:58:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:58:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:01:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:01:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:01:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:44:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:44:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:44:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:44:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:02:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:02:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:51:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:51:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:51:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:51:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:50:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:50:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:50:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:50:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:40:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:40:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:03:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:03:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top