SCARD

Suspicious activity by IP address 117.241.78.154

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 16:37:43 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 117.241.78.154

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 138
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 138

Detailed activity by IP address 117.241.78.154

Timestamp Description Protocol Destination Port
2026-07-06 16:37:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:37:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:37:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:37:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:12:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:12:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:12:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:12:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:37:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:14:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:34:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:34:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:34:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:34:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:54:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:11:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:11:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:46:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:46:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:46:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:46:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:05:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:57:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:57:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:57:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:57:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:01:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:01:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:01:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:01:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top