SCARD

Suspicious activity by IP address 20.90.164.238

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:26:10 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.90.164.238

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 360
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 360

Detailed activity by IP address 20.90.164.238

Timestamp Description Protocol Destination Port
2026-08-19 19:26:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:26:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:26:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:26:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:35:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:35:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:23:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:53:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:32:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:32:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:32:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:32:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:32:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:32:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:32:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:32:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:25:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:14:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:31:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:27:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:27:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:27:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:27:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:04:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:22:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:19:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:37:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:37:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:37:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:37:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:37:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:17:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:40:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:40:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:40:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:40:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:40:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:40:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:40:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:40:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:17:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:57:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:57:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:57:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:57:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:51:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:51:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:51:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:51:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:51:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:51:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:51:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:51:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:25:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:43:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:16:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:13:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:30:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:38:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:38:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:38:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:38:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:38:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:38:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:38:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:38:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:26:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:57:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:26:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:59:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:38:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 20:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-07 20:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-07 20:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-07 20:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-07-22 22:17:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 3000
2026-07-22 22:17:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 3000
2026-07-22 22:17:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 3000
2026-07-22 22:17:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 3000

 

Back to top