SCARD

Suspicious activity by IP address 154.90.37.55

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 05:45:10 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 154.90.37.55

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 256
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 256

Detailed activity by IP address 154.90.37.55

Timestamp Description Protocol Destination Port
2026-08-19 05:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:53:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:53:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:53:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:53:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:53:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:53:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:53:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:53:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:53:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:53:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:20:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:20:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:20:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:20:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:53:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:23:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:46:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:32:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:28:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:28:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:28:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:28:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:33:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:08:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:34:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:34:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:34:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:34:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:34:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:34:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:34:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:34:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:12:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:32:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:15:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:39:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:39:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:39:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:39:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:42:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:42:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:42:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:42:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:42:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:42:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:42:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:42:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:32:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:32:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:32:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:32:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:17:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:17:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:17:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:17:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:20:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:12:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:12:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:12:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:12:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:28:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:00:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:00:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:00:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:00:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:03:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:03:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:03:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:03:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:41:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:10:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:20:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:20:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:20:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:20:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:46:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top