SCARD

Suspicious activity by IP address 197.243.109.173

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:43:13 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 197.243.109.173

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 198
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 198

Detailed activity by IP address 197.243.109.173

Timestamp Description Protocol Destination Port
2026-07-06 10:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:35:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:35:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:35:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:35:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:25:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:25:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:09:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:30:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:47:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:47:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:47:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:47:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:18:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:18:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:18:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:18:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:02:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:02:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:02:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:02:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:14:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:14:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:14:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:15:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:17:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:17:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:17:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:17:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:31:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:31:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:31:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:31:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:30:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:30:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:30:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:30:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:29:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:29:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:29:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:29:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:03:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:03:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:03:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:03:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:09:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:26:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:26:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:43:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:43:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:43:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:43:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:00:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:00:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:00:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:00:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top