SCARD

Suspicious activity by IP address 222.74.219.131

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sun, 20 Sep 2026 01:19:12 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 222.74.219.131

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 521
ET INFO WinRM wsman Access - Possible Lateral Movement 519

Detailed activity by IP address 222.74.219.131

Timestamp Description Protocol Destination Port
2026-09-20 01:19:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-09-20 01:19:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-19 06:36:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:36:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:36:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:36:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:36:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:36:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:36:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:36:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:59:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:59:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 05:31:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 05:31:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 05:31:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 05:31:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:30:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:30:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:11:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 01:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-17 01:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-17 01:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-17 01:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-16 23:34:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:34:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:34:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:34:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:34:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:34:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:34:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:34:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:23:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:23:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:23:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:23:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:24:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:24:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:24:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:24:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:24:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:24:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:52:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:09:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:40:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:40:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:40:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:40:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:24:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:24:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 02:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 02:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 02:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 02:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:25:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:25:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:25:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:25:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:47:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:47:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:59:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:59:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:59:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:59:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:50:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:50:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:50:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:50:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:03:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:42:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:42:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:42:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:42:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:08:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:08:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:08:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:08:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:06:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:06:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:23:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:23:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:23:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:23:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:23:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:23:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:06:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:35:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:35:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:35:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:35:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:15:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:15:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:40:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:40:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 10:05:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 10:05:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 10:05:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 10:05:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:14:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:14:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:14:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:14:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:37:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:18:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:18:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:18:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:18:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:30:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:30:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:30:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:30:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:14:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:14:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:14:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:14:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:55:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:55:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:55:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:55:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:54:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:54:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:02:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:33:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:33:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:33:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:33:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:33:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:33:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:33:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:33:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:22:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:26:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:27:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:27:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:21:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:24:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:47:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:20:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:20:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:01:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:01:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:01:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:01:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:08:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:27:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:27:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:27:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:27:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:27:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:27:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:50:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:50:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:50:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:50:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:21:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:21:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top