SCARD

Suspicious activity by IP address 217.52.32.91

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:45:59 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 217.52.32.91

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 254
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 254

Detailed activity by IP address 217.52.32.91

Timestamp Description Protocol Destination Port
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:08:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:21:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:34:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:34:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:34:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:34:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:00:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:03:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:03:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:57:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:57:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:57:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:57:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:00:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:00:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:00:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:00:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:48:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:25:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:25:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:25:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:25:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:49:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:01:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:01:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:01:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:01:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:01:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:01:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:01:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:01:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:21:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:21:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:58:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:58:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:58:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:58:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:57:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:23:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:23:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:09:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:09:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:09:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:09:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:43:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:39:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:39:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:33:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:33:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:24:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:22:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:22:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:22:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:22:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:51:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:18:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:18:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:18:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:18:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:08:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:08:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:08:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:08:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:07:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:55:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:55:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:55:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:55:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:35:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:35:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:35:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:35:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:48:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:48:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:49:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:49:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:49:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:49:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:19:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:19:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:19:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:19:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:54:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:54:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:54:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:54:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:40:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:40:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:40:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:40:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top