SCARD

Suspicious activity by IP address 118.196.23.247

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 06:40:24 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 118.196.23.247

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 262
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 262

Detailed activity by IP address 118.196.23.247

Timestamp Description Protocol Destination Port
2026-08-19 06:40:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:40:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:40:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:40:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:40:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:40:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:40:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:40:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:23:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:23:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:23:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:23:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:06:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:08:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:58:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:58:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:58:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:58:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:42:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:54:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:54:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:53:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:53:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:53:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:53:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:09:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:09:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:09:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:09:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:11:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:49:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:49:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:49:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:49:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:06:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:06:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:06:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:06:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:06:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:06:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:06:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:06:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:51:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:56:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:56:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:56:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:56:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:13:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:52:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:52:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:52:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:52:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:22:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:22:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:22:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:34:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:20:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:18:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:12:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:12:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:27:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:27:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:27:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:27:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:17:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:17:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:17:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:17:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:25:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:25:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:25:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:25:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:03:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:26:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:26:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:26:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:26:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:29:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:29:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:29:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:29:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:48:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:48:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:48:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:48:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:32:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:32:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:32:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:32:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:30:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:30:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:42:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:42:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:42:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:42:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:27:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:27:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:27:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:27:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:15:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:15:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:15:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:15:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top