SCARD

Suspicious activity by IP address 4.188.251.117

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 07:58:05 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 4.188.251.117

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 128
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 128

Detailed activity by IP address 4.188.251.117

Timestamp Description Protocol Destination Port
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:54:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:54:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:54:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:54:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:13:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:13:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:13:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:13:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:23:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:23:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:11:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:11:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:11:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:11:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:06:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:49:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:49:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:49:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:49:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:49:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:49:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:49:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:49:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:48:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:48:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:48:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:48:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:48:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:48:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:48:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:48:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:27:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:27:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:27:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:27:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:05:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:51:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:51:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:51:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:51:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:50:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:50:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:18:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:50:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 01:20:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 01:20:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 01:20:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 01:20:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:14:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:14:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:14:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:14:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:56:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:56:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:56:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:56:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:51:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:51:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:51:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:51:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:27:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:27:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:28:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:28:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 19:28:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:28:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 14:28:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 14:28:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 14:28:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 14:28:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:01:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:01:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:01:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:01:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:39:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:39:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:39:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:39:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:11:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:11:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:11:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:11:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:10:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:10:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:10:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:10:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:14:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:14:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:14:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:14:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:14:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:14:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:14:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:14:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 04:22:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 04:22:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 04:22:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 04:22:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top