SCARD

Suspicious activity by IP address 116.6.60.40

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 17 Aug 2026 04:29:44 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 116.6.60.40

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 254
ET INFO WinRM wsman Access - Possible Lateral Movement 254

Detailed activity by IP address 116.6.60.40

Timestamp Description Protocol Destination Port
2026-08-17 04:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:27:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:15:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:25:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:25:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:25:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:25:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:25:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:25:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:25:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:25:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:04:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:04:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:04:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:04:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:34:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:50:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:50:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:50:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:50:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:49:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:49:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:49:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:49:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:49:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:49:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:49:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:49:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:50:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:50:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:50:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:50:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:58:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:49:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:25:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:44:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:37:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:58:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:33:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:41:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:25:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:25:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:25:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:25:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:38:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:38:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:38:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:38:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:22:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:46:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:46:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:46:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:46:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:46:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:46:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:46:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:46:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:22:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:22:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:22:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:22:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:22:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:22:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:22:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:22:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:02:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:05:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:15:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:15:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:15:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:15:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:15:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:15:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:15:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:15:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:23:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:23:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:23:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:23:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:23:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:23:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:39:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:39:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:39:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:39:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top