SCARD

Suspicious activity by IP address 125.222.146.34

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:30:00 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 125.222.146.34

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 644
ET INFO WinRM wsman Access - Possible Lateral Movement 644

Detailed activity by IP address 125.222.146.34

Timestamp Description Protocol Destination Port
2026-08-19 19:30:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:30:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:30:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:30:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:00:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:23:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:23:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:23:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:23:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:20:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:43:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:43:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:43:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:43:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:43:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:51:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:30:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:38:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:05:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:08:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:08:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:08:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:08:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:50:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:41:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:44:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:40:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:14:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:14:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:14:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:14:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:14:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:14:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:14:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:14:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:30:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:40:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:23:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:23:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:23:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:23:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:23:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:23:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:23:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:23:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:03:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:39:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:46:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:16:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:16:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:16:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:16:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:16:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:16:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:16:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:16:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:02:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:11:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:56:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:56:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:56:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:56:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:14:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:24:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:38:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:38:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:38:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:38:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:38:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top