SCARD

Suspicious activity by IP address 139.5.19.235

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 20 Jul 2026 19:50:20 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 139.5.19.235

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 370
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 370

Detailed activity by IP address 139.5.19.235

Timestamp Description Protocol Destination Port
2026-07-20 19:50:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:50:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:50:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:50:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:45:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:45:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:45:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:45:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:45:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:45:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:45:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:45:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:06:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:06:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:59:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:32:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:32:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:31:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:31:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:31:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:03:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:03:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:03:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:03:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:53:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:53:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:42:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:59:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:59:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:59:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:59:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:53:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:30:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:13:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:13:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:13:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:13:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:44:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:44:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:43:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:43:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:43:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:43:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:43:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:27:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:48:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:48:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:48:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:48:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:28:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:28:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:47:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:47:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:47:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:47:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:25:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:25:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:25:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:25:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:41:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:40:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:40:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:40:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:40:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:32:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:16:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:16:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:16:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:16:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:16:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:16:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:16:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:16:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:15:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:13:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:13:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:13:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:13:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:55:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:33:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:33:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:02:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:02:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:02:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:02:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:32:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:32:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:25:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:25:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:25:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:25:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:34:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:34:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:34:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:34:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:25:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top