SCARD

Suspicious activity by IP address 122.185.220.190

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 16:31:03 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 122.185.220.190

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 149
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 149

Detailed activity by IP address 122.185.220.190

Timestamp Description Protocol Destination Port
2026-07-06 16:31:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:31:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:11:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:11:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:28:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:28:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:28:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:28:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:33:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:33:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:10:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:10:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:10:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:10:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:47:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:47:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:47:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:47:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:22:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:22:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:22:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:22:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:24:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:24:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:24:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:24:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:38:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:38:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:38:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:38:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:34:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:11:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:11:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:11:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:11:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:07:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:07:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:45:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:45:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:08:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:08:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:47:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:47:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:47:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:47:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:46:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:46:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:46:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:46:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top