SCARD

Suspicious activity by IP address 222.186.57.88

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 17 Aug 2026 04:22:22 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 222.186.57.88

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 234
ET INFO WinRM wsman Access - Possible Lateral Movement 234

Detailed activity by IP address 222.186.57.88

Timestamp Description Protocol Destination Port
2026-08-17 04:22:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:22:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:57:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:57:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:57:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:57:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:57:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:57:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:44:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:44:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:44:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:44:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:08:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:26:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:26:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:26:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:26:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:26:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:26:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:26:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:26:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:44:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:44:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:44:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:44:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:24:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:24:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:24:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:24:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:24:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:24:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:24:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:24:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:08:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:07:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:30:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:30:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:30:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:30:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:30:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:30:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:30:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:30:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:51:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:51:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:51:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:51:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:43:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:43:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:43:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:43:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:55:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:55:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:55:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:55:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:52:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:50:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:50:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:50:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:50:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:20:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:20:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:20:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:20:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:20:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:20:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:20:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:20:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:56:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:56:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 19:56:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 19:56:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:32:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:32:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:31:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:31:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:58:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:58:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:31:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:23:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:23:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:23:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:23:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:23:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:23:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:23:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:23:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:39:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:39:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:39:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:39:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:15:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:15:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:15:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:15:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:01:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:01:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:01:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:01:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:13:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:13:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:13:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:13:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:19:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:19:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:19:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:19:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:03:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:03:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:56:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:56:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:08:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:08:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:08:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:08:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:23:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:53:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:53:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:53:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:53:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:28:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:34:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:34:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:26:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:26:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:17:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:17:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:26:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:26:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:49:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:49:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:35:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:35:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:35:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:35:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:30:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:30:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:39:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:39:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:39:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:39:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top