SCARD

Suspicious activity by IP address 160.30.160.133

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:04:47 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 160.30.160.133

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 204
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 204

Detailed activity by IP address 160.30.160.133

Timestamp Description Protocol Destination Port
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:24:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:24:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:50:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:50:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:50:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:50:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:00:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:44:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:43:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:43:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:33:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:33:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:33:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:33:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:30:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:30:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:30:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:30:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:25:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:25:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:25:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:25:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:30:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:30:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:30:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:30:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:30:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:12:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:12:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:12:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:12:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:12:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:32:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:32:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:32:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:32:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:06:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:06:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:56:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:56:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:56:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:56:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:56:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:56:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:56:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:56:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:11:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:46:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:46:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:46:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:46:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:46:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:46:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:46:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:46:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:48:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:48:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:48:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:48:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 12:23:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 12:23:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 12:23:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 12:23:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:22:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:22:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:22:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:49:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:49:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:49:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:49:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:07:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:07:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:07:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:07:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 18:29:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-07-03 18:29:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-07-03 18:29:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-07-03 18:29:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-07-03 18:29:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-07-03 18:29:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-07-03 18:29:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-07-03 18:29:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-07-03 13:18:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:18:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:18:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:18:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:44:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:44:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:44:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:44:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top