SCARD

Suspicious activity by IP address 186.139.64.243

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:11:57 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 186.139.64.243

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 130
ET INFO WinRM wsman Access - Possible Lateral Movement 130

Detailed activity by IP address 186.139.64.243

Timestamp Description Protocol Destination Port
2026-07-06 10:11:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:11:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:11:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:11:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:17:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:17:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:53:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:53:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:53:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:53:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:38:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:38:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:38:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:38:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:38:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:27:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:27:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:27:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:27:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:42:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:42:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:42:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:42:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:31:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:31:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:31:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:31:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:50:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:50:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:50:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:50:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:32:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:32:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:32:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:32:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:05:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:05:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:22:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:22:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:52:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:52:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:52:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:52:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:58:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:58:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:58:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:58:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:42:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:04:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:04:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top