SCARD

Suspicious activity by IP address 20.174.184.111

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 06:12:38 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.174.184.111

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 298
ET INFO WinRM wsman Access - Possible Lateral Movement 298

Detailed activity by IP address 20.174.184.111

Timestamp Description Protocol Destination Port
2026-08-19 06:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:54:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:36:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:04:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:49:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:07:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:27:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 10:13:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 10:13:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 10:13:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 10:13:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:12:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:12:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:12:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:12:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:27:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:43:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:40:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:51:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:30:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:09:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:09:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:09:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:09:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:23:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:13:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:13:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:13:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:13:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:19:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:19:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:19:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:19:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:39:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:59:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:21:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:03:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:52:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top