SCARD

Suspicious activity by IP address 172.191.171.55

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:59:37 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 172.191.171.55

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 200
ET INFO WinRM wsman Access - Possible Lateral Movement 200

Detailed activity by IP address 172.191.171.55

Timestamp Description Protocol Destination Port
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:50:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:50:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:19:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:19:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:16:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:29:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:29:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:52:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:07:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:07:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:39:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:39:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:39:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:39:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:14:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:47:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:47:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:47:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:47:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:05:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:25:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:48:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:48:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:48:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:48:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:47:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:47:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:47:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:47:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:39:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:39:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:12:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:12:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:12:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:12:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:08:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:08:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:08:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:08:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:38:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:38:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:38:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:38:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:03:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:03:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:03:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:03:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:43:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:43:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:43:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:43:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 15:31:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:31:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 15:31:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 15:31:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:39:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:39:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:39:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:39:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 12:00:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 12:00:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 12:00:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 12:00:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 09:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 09:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 09:54:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 09:54:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 08:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 08:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 08:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 08:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 03:18:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 03:18:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 03:18:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 03:18:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 01:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 01:20:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:20:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:24:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:24:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:24:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:24:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 16:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 16:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 16:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 16:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 11:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 11:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:07:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:07:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 10:07:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 10:07:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:18:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:18:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top