SCARD

Suspicious activity by IP address 222.174.17.118

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:10:10 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 222.174.17.118

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 371
ET INFO WinRM wsman Access - Possible Lateral Movement 371

Detailed activity by IP address 222.174.17.118

Timestamp Description Protocol Destination Port
2026-08-19 19:10:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:10:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:10:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:10:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:28:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:51:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:51:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:41:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:41:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:41:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:13:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:50:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:50:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:50:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:50:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:29:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:11:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:39:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:39:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:11:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:11:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:11:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:11:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:11:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:11:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:11:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:11:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:31:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:31:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:31:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:31:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:56:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:56:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:56:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:56:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:47:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:11:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:11:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:11:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:11:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:11:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:11:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:11:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:11:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:00:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:00:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:42:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:55:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:16:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:31:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:31:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:31:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:31:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:54:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:54:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:57:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:57:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:57:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:57:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:50:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:03:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:19:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:11:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:07:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:07:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:07:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:07:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:07:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:07:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:07:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:07:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:37:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:37:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:51:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:51:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:51:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:51:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:02:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:14:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:14:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:14:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:14:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:14:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:14:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:02:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 22:02:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:02:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 22:02:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:51:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:51:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:51:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:51:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:51:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:51:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:01:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:01:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:01:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:01:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:04:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:04:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:04:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:04:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:04:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:04:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:04:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:04:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:00:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:05:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:35:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:35:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:57:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:57:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:57:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:57:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:34:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:34:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:34:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:34:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:44:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:44:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:44:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:44:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:44:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:44:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:44:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:44:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:20:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:46:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:23:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:53:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:04:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:04:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:04:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:04:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:33:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:58:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:58:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:58:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:58:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:36:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:29:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top