SCARD

Suspicious activity by IP address 222.133.52.246

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 06:07:20 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 222.133.52.246

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 583
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 583

Detailed activity by IP address 222.133.52.246

Timestamp Description Protocol Destination Port
2026-08-19 06:07:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:07:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:07:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:07:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:07:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:07:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:07:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:07:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:40:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:40:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:21:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:21:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:46:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:17:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:17:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:17:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:17:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:17:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:11:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:35:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:21:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:21:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:24:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:03:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:38:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:38:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:16:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:08:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:08:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:08:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:08:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:50:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:50:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:50:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:50:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:50:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:50:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:50:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:50:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:35:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:28:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:11:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:11:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:11:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:11:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:27:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:27:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:27:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:27:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:31:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:24:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:24:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:24:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:24:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:24:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:24:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:27:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:27:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:27:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:27:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:18:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:18:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:59:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:59:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:59:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:25:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:25:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:25:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:25:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:25:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:25:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:07:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:10:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:09:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:09:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:09:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:09:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:04:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:28:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:53:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:26:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:26:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:26:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:11:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:11:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:11:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:11:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:57:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:57:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:57:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:57:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:51:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:51:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:51:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:51:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 00:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 00:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 00:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 00:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:19:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:19:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:19:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:19:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:41:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:54:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:33:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top