SCARD

Suspicious activity by IP address 20.118.128.131

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:30:52 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.118.128.131

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 692
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 692

Detailed activity by IP address 20.118.128.131

Timestamp Description Protocol Destination Port
2026-08-19 19:30:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:30:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:30:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:30:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:20:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:20:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:20:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:20:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:42:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 01:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-17 01:53:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-17 01:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-17 01:53:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-14 23:10:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:10:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:10:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:10:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:10:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:58:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:43:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:02:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:02:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:02:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:02:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:02:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:02:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:02:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:02:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:22:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:55:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:44:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:14:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:30:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:30:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:30:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:30:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:30:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:30:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:30:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:30:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:39:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:33:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:30:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:25:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:16:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:16:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:16:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:16:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:58:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:35:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:35:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:35:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:01:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:05:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:14:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:45:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:31:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:31:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:31:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:31:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:09:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:09:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:09:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:09:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:09:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:09:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:09:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:09:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:08:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:15:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:15:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:15:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:15:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top