SCARD

Suspicious activity by IP address 185.112.200.161

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 09 Aug 2026 05:05:07 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 185.112.200.161

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 374
ET INFO WinRM wsman Access - Possible Lateral Movement 374

Detailed activity by IP address 185.112.200.161

Timestamp Description Protocol Destination Port
2026-08-09 05:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:14:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:18:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:59:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:39:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:21:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:21:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:21:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:21:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:22:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:22:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:22:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:22:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:40:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:40:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:40:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:54:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:54:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:54:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:54:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:54:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:54:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:54:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:54:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:44:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:44:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:44:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:44:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:54:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:08:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:08:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:59:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:59:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:59:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:59:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:47:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:47:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:47:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:47:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:40:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:40:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 07:40:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:40:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:06:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:06:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:06:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:06:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:13:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:06:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:06:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:06:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:06:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:01:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:01:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:01:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:01:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:00:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:44:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:44:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:44:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:44:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:24:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:24:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:24:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:24:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:59:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:59:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:59:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:59:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top