SCARD

Suspicious activity by IP address 20.55.92.25

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 04:33:43 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.55.92.25

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 370
ET INFO WinRM wsman Access - Possible Lateral Movement 370

Detailed activity by IP address 20.55.92.25

Timestamp Description Protocol Destination Port
2026-08-19 04:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:33:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:33:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:39:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:39:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:39:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:39:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:39:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:41:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:42:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:42:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:42:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:42:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:59:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:59:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:59:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:59:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:29:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:05:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:00:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:57:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:40:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:39:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:39:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:39:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:39:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:39:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:21:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:21:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:21:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:21:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:20:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:20:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:20:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:20:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:01:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:48:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:48:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:48:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:48:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:48:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:48:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:48:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:48:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:20:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:04:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:31:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:18:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:24:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:24:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:24:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:24:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:24:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:24:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:24:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:24:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:40:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:44:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:03:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:03:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:03:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:03:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:03:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:03:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:03:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:03:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:47:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:31:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:40:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:40:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:40:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:40:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:40:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:40:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:40:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:40:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:53:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:53:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:53:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:53:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:53:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:53:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:53:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:53:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:37:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:34:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:19:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top