SCARD

Suspicious activity by IP address 4.194.240.177

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 05:53:09 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 4.194.240.177

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 124
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 124

Detailed activity by IP address 4.194.240.177

Timestamp Description Protocol Destination Port
2026-07-06 05:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:42:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:50:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:17:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:17:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:56:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:08:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:08:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:08:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:08:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:14:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:14:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:14:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:14:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:26:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:26:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:10:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:10:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:10:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:10:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:30:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:06:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:06:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:06:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:06:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:55:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:55:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:35:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:35:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:35:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:35:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 16:15:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 16:15:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:15:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:15:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:52:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:52:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 19:52:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 19:52:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 14:33:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 14:33:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 14:33:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 14:33:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 12:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 12:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 12:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 12:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 09:19:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 09:19:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 09:19:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 09:19:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:35:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:35:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 04:35:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:35:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:34:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:34:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 01:34:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:34:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:57:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:57:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:57:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:57:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 22:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 22:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:26:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:26:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:26:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:26:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:44:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 12:44:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:44:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 12:44:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:00:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 11:00:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 11:00:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 11:00:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 09:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 09:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 09:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 09:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:18:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:18:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 02:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 02:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top