SCARD

Suspicious activity by IP address 222.173.95.86

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 05 Jul 2026 22:56:46 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 222.173.95.86

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 146
ET INFO WinRM wsman Access - Possible Lateral Movement 146

Detailed activity by IP address 222.173.95.86

Timestamp Description Protocol Destination Port
2026-07-05 22:56:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:56:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:56:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:56:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:28:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:28:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:28:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:28:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:08:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:08:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:08:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:08:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:27:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:27:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:27:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:27:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:27:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:27:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:27:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:27:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:12:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:12:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:12:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:12:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:01:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:01:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:01:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:01:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:39:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:39:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:39:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:39:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:37:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:49:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:49:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:53:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:53:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:53:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:53:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:49:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:49:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:49:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:49:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:14:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:14:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:14:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:14:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:19:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:19:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:19:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:19:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:10:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:10:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:57:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:26:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:26:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:16:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:16:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:16:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:16:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:20:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:20:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:20:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:20:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:40:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:40:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:40:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:40:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:53:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:37:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:37:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:37:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:37:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:56:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:56:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:56:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:56:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:53:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:38:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:38:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:38:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:38:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top