SCARD

Suspicious activity by IP address 139.213.243.2

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 15 Aug 2026 04:01:16 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 139.213.243.2

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 237
ET INFO WinRM wsman Access - Possible Lateral Movement 237

Detailed activity by IP address 139.213.243.2

Timestamp Description Protocol Destination Port
2026-08-15 04:01:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 04:01:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 04:01:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 04:01:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:00:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:00:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:00:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:00:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 00:05:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 00:05:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 00:05:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 00:05:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:27:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:27:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:27:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:27:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:03:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:03:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:03:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:03:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:39:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:39:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:39:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:39:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:39:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:39:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:39:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:39:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:57:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:41:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:29:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:29:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:29:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:29:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:53:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:53:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:53:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:28:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:28:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:28:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:28:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:46:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:11:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:00:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:00:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:59:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:59:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:59:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:59:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:45:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:45:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 07:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:12:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:12:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:12:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:12:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:03:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:03:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:03:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:03:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:57:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:57:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:57:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:57:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:56:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:56:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:56:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:56:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:36:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:36:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:35:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:35:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:35:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:35:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:37:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:37:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:28:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:42:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:42:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:42:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:42:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:56:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:56:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:56:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:56:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:41:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:41:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:41:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:41:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:41:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:45:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:45:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:45:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:45:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:43:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:35:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:35:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:45:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:28:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:28:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:03:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:03:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:47:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:47:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:47:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:47:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:30:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:30:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:07:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:07:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:07:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:07:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:17:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:17:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:24:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:24:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:24:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:24:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:39:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:39:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:39:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:39:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:23:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:35:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:35:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:54:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:54:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:54:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:54:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:12:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:12:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top