SCARD

Suspicious activity by IP address 20.44.139.140

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 05:13:01 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.44.139.140

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 316
ET INFO WinRM wsman Access - Possible Lateral Movement 316

Detailed activity by IP address 20.44.139.140

Timestamp Description Protocol Destination Port
2026-08-19 05:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:13:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:13:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:02:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:02:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:02:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:02:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 05:04:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:07:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:47:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:26:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:26:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:26:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:26:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:52:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:09:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:15:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:21:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:21:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:21:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:21:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:21:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:21:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:21:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:21:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:59:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:59:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:59:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:59:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:29:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:14:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:32:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:44:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:44:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:44:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:44:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:42:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:37:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:15:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:15:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:15:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:15:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:45:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:37:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:52:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:23:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 02:57:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 02:57:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 02:57:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 02:57:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:56:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:39:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:25:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:25:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:25:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:25:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:16:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:16:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:38:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:38:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:38:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:38:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:05:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:41:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:30:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:30:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:30:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:30:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:25:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top