SCARD

Suspicious activity by IP address 125.222.146.34

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 09:51:27 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 125.222.146.34

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 270
ET INFO WinRM wsman Access - Possible Lateral Movement 270

Detailed activity by IP address 125.222.146.34

Timestamp Description Protocol Destination Port
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:36:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:36:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:36:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:36:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:56:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:16:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:16:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:16:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:16:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:37:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:44:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:44:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:44:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:44:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:00:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:00:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:51:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:05:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:05:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:52:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:52:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:52:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:52:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:22:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:22:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:22:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:22:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:08:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:08:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:08:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:40:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:13:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:13:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:33:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:33:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:33:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:33:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:11:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:11:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:11:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:11:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top