SCARD

Suspicious activity by IP address 112.213.123.35

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 05 Jul 2026 17:15:56 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 112.213.123.35

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 110
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 110

Detailed activity by IP address 112.213.123.35

Timestamp Description Protocol Destination Port
2026-07-05 17:15:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:15:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:15:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:50:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:50:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:50:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:50:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:26:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:52:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:52:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:52:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:52:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:52:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:52:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:52:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:52:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:29:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:06:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:22:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:22:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top