SCARD

Suspicious activity by IP address 39.106.172.206

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:21:24 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 39.106.172.206

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 108
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 108

Detailed activity by IP address 39.106.172.206

Timestamp Description Protocol Destination Port
2026-07-06 10:21:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:21:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:21:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:21:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:08:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:08:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:08:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:08:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:22:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:22:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:22:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:22:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:10:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:52:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:12:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:12:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:12:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:12:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:10:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:10:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:01:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 00:01:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:01:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:01:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:22:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:41:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:41:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:41:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:41:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:41:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:41:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:41:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:41:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:18:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:21:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:21:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:21:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:21:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:18:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:18:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 16:17:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 16:17:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:16:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:16:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:50:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:50:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:35:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:35:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:42:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:42:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:34:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:34:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 05:34:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 05:34:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:19:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:19:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:19:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:19:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:27:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 16:27:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:27:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 16:27:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top