SCARD

Suspicious activity by IP address 20.127.218.138

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:12:57 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.127.218.138

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 308
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 308

Detailed activity by IP address 20.127.218.138

Timestamp Description Protocol Destination Port
2026-08-19 19:12:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:12:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:08:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:15:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:15:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:15:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:15:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:21:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:39:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:39:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:15:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:56:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:31:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:31:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:31:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:31:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:25:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:17:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:18:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:09:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:23:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:01:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:00:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:38:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:38:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:38:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:38:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:38:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:38:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:38:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:38:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:34:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:53:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:53:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:53:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:53:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:55:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:04:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:04:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:04:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:04:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:49:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:21:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:45:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:40:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:59:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:11:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:11:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:51:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:51:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:51:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:51:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:28:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:28:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:06:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:06:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:58:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:58:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:58:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:58:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:45:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:45:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:45:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:45:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:57:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:48:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:48:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:48:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:48:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:48:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:48:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:48:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:48:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top