SCARD

Suspicious activity by IP address 217.52.32.91

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:12:49 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 217.52.32.91

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 626
ET INFO WinRM wsman Access - Possible Lateral Movement 626

Detailed activity by IP address 217.52.32.91

Timestamp Description Protocol Destination Port
2026-08-19 19:12:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:12:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:12:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:12:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:57:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:19:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:19:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:19:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:19:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:45:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:45:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:45:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:45:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:45:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:45:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:08:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:08:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:08:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:08:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:02:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:46:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:46:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:46:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:46:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:46:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:46:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:46:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:46:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:57:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:28:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:10:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:33:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:33:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:33:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:33:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:13:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:13:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:13:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:13:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:13:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:13:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:13:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:13:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:11:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:45:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:45:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:45:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:45:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:45:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:45:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:56:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:56:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:56:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:56:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:30:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:59:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:38:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:38:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:38:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:38:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:38:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:38:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:38:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:38:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:47:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:47:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:59:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:56:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:56:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:56:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:56:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:56:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:56:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:56:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:56:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:45:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:45:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:45:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:45:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:45:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:45:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:45:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:45:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:13:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:13:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:13:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:13:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:13:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:13:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:13:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:13:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:06:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:06:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:06:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:06:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:53:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:53:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:53:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:53:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:11:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:11:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:11:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:11:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:41:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:41:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:41:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:41:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:41:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:41:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:41:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:41:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:40:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:03:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:16:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:16:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:16:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:16:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:16:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:16:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:01:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:01:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:01:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:01:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:01:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:01:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:37:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:37:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:29:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:29:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:48:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:48:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:48:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:48:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top