SCARD

Suspicious activity by IP address 20.7.34.105

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:35:21 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.7.34.105

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 390
ET INFO WinRM wsman Access - Possible Lateral Movement 390

Detailed activity by IP address 20.7.34.105

Timestamp Description Protocol Destination Port
2026-08-19 19:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:35:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:35:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:18:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:18:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:18:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:18:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:13:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:13:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:14:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:14:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:14:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:14:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:39:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:04:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:24:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:41:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:48:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:00:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:00:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:00:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:00:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:04:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:28:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:28:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:38:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:58:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:10:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:10:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:10:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:10:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:14:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:36:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:36:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:36:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:36:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:36:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:36:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:36:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:36:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:12:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:53:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:19:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:44:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:44:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:44:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:44:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:44:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:44:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:44:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:44:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 20:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-07 20:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-07 20:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-07 20:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-07-20 19:45:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:45:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:45:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:45:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:44:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:44:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:44:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:44:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:26:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:26:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:09:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:23:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:36:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:36:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:36:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:36:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:57:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:21:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:21:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:38:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:38:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:38:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:38:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:19:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:56:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:51:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:25:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top