SCARD

Suspicious activity by IP address 172.174.211.162

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 20 Sep 2026 01:22:11 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.174.211.162

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 300
ET INFO WinRM wsman Access - Possible Lateral Movement 298

Detailed activity by IP address 172.174.211.162

Timestamp Description Protocol Destination Port
2026-09-20 01:22:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-09-20 01:22:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-19 06:45:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:45:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:45:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:45:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:45:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:45:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:45:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:45:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:42:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:44:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:44:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:44:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:44:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:13:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:13:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:13:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:13:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:13:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:23:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:53:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:12:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:17:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:38:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:54:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:32:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:56:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:09:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:39:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:44:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:44:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:44:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:44:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:08:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:34:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:34:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:34:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:46:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:45:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:51:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:51:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:13:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:13:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:13:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:13:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:13:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:13:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:13:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:13:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:48:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:16:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:16:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:16:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:16:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:16:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:16:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:16:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:16:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:38:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:38:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:38:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:38:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:38:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:38:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:38:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:38:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:47:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:47:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:47:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:47:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:47:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:47:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:47:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:47:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:33:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:34:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:34:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:34:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:34:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:33:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:10:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:10:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:10:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:10:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:56:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:56:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:56:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:56:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:40:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:40:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:40:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:40:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:02:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:02:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:02:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:02:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:02:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:02:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top