SCARD

Suspicious activity by IP address 124.133.246.234

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 05 Jul 2026 18:06:43 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 124.133.246.234

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 258
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 258

Detailed activity by IP address 124.133.246.234

Timestamp Description Protocol Destination Port
2026-07-05 18:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:06:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:06:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:53:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:53:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:53:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:53:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:52:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:52:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:52:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:52:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:52:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:19:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:19:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:19:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:19:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:03:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:03:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:03:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:03:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:02:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:02:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:02:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:02:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:02:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:02:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:02:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:02:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:05:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:05:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:05:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:05:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:24:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:24:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:24:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:24:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:23:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:23:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:34:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:34:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:34:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:34:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:06:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:06:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:41:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:41:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:41:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:41:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:08:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:08:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:08:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:08:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:03:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:03:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:03:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:03:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:01:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:01:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:01:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:01:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:51:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:51:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:51:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:51:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:37:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:37:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:37:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:37:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:41:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:41:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:41:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:41:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:36:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:36:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:36:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:36:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:36:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:48:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:48:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:48:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:48:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:48:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:48:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:40:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:35:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:35:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:47:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:34:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:34:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:22:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:21:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:21:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:21:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:21:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:22:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:22:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:22:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:22:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:57:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:57:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:57:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:57:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:40:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:21:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:21:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:21:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:21:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:02:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:02:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:02:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:02:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:45:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:45:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:45:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:45:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:45:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:45:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:45:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:45:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 12:14:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 12:14:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 12:13:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 12:13:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:23:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:23:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:23:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:23:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:12:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:48:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:04:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:04:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:51:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:51:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:51:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:51:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:23:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:23:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:04:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:04:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:04:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:04:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:26:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:26:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:26:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:26:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:21:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:21:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:05:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:05:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:43:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:43:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:43:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:43:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:04:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:04:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:04:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:04:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:04:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:04:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:04:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:04:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:46:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:10:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:10:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:10:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:10:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:20:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:20:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:56:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:56:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:55:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:55:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:30:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:30:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top