SCARD

Suspicious activity by IP address 172.172.125.65

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 05:40:30 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.172.125.65

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 332
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 332

Detailed activity by IP address 172.172.125.65

Timestamp Description Protocol Destination Port
2026-08-19 05:40:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:16:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:40:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:40:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:40:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:40:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:40:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:40:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:40:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:40:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:31:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:26:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:45:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:59:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:59:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:59:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:59:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:59:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:59:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:59:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:59:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:26:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:41:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:26:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:07:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:07:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:07:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:07:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:07:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:07:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:07:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:07:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:07:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:39:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:18:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:18:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:18:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:18:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:59:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:20:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:20:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:38:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:51:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:51:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:51:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:51:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:51:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:51:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:51:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:51:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:15:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:35:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:35:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:31:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:28:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:28:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:28:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:28:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:28:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:28:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:28:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:28:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:21:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:51:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:14:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:14:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:14:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:14:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top