SCARD

Suspicious activity by IP address 154.83.13.38

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:53:15 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 154.83.13.38

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 188
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 188

Detailed activity by IP address 154.83.13.38

Timestamp Description Protocol Destination Port
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:03:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:39:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:39:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:01:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:01:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:01:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:01:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:23:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:23:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:23:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:23:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:10:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:10:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:10:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:10:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:09:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:46:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:46:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:46:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:46:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:56:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:56:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:15:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:15:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:37:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:37:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:37:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:37:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:35:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:35:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:46:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:46:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:46:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:46:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:45:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:45:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:45:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:45:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:43:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:43:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:43:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:43:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:43:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:43:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:43:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:43:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:27:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:27:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:27:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:27:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:26:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:26:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:26:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:26:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:49:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:36:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:52:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:33:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:33:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:39:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:39:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:39:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:39:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:33:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:33:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:33:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:33:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top