SCARD

Suspicious activity by IP address 182.37.52.234

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:32:29 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 182.37.52.234

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 121
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 121

Detailed activity by IP address 182.37.52.234

Timestamp Description Protocol Destination Port
2026-07-06 10:32:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:32:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:32:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:32:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:29:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:46:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:46:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:46:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:46:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:45:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:45:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:45:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:45:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:45:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:45:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:45:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:45:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:24:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:24:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:23:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:23:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:22:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:22:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:22:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:22:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:22:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:22:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:22:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:22:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:46:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:55:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:14:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:14:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:42:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:42:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:30:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:30:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:30:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:30:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:08:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:08:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:45:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:29:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:13:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:13:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:13:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:13:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:13:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:13:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:13:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:13:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:45:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:45:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:45:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:45:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:45:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:45:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:45:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:45:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top