SCARD

Suspicious activity by IP address 4.188.82.11

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 06:17:11 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 4.188.82.11

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 286
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 286

Detailed activity by IP address 4.188.82.11

Timestamp Description Protocol Destination Port
2026-08-19 06:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:17:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:17:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:17:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:17:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:17:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:17:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:05:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:49:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 01:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-17 01:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-17 01:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-17 01:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-16 23:19:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:19:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:19:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:19:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:19:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:19:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:19:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:19:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:17:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:22:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:02:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:24:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:59:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:32:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:40:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:54:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:05:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:44:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:35:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:11:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:03:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:17:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:17:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:17:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:17:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:17:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:17:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:17:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:17:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:03:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:03:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:03:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:03:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:03:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:03:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:03:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:03:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:19:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:19:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:19:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:19:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:19:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:19:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:19:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:19:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:35:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:55:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:56:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:08:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:22:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:04:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:26:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:24:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:09:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:30:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:58:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:58:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 10:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 10:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:09:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:09:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:09:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:09:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:25:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:25:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:52:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:06:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:44:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top