SCARD

Suspicious activity by IP address 185.77.3.30

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 04:59:11 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 185.77.3.30

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 484
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 484

Detailed activity by IP address 185.77.3.30

Timestamp Description Protocol Destination Port
2026-08-19 04:59:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:59:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:59:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:59:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:59:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:41:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:41:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:41:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:41:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:17:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:17:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:17:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:22:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:22:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:10:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:10:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:10:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:10:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:23:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:23:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:23:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:23:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:23:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:23:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:23:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:23:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:28:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:00:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:00:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:00:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:00:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:25:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:25:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:25:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:25:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:46:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:27:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:21:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:21:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:21:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:21:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:21:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:21:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:41:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:41:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:41:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:41:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:41:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:41:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:41:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:41:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:55:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:22:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:21:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:03:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:46:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:46:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:46:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:46:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:46:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:46:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:46:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:46:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:35:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:35:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:35:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:35:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:55:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:26:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:26:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:26:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:26:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:26:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:26:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:26:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:26:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:54:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:54:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:54:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:54:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:38:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:38:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:38:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:38:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:43:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:08:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:19:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:19:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:19:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:19:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:01:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:01:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:01:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:01:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:42:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:42:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:42:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:42:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top