SCARD

Suspicious activity by IP address 4.240.95.136

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:18:51 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 4.240.95.136

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 264
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 264

Detailed activity by IP address 4.240.95.136

Timestamp Description Protocol Destination Port
2026-08-19 19:18:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:18:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:18:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:18:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:14:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:48:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:32:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:59:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:23:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:07:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:24:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:43:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:43:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:43:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:43:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:29:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:50:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:35:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:41:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:31:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:12:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:12:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:31:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:31:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:31:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:31:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:31:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:31:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:31:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:31:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:24:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:44:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:44:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:44:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:44:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:54:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:23:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:52:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:35:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:35:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:35:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:35:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:13:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:13:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:13:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:13:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:13:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:13:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:35:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:25:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:25:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:25:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:25:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:24:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:01:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:01:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:01:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:01:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:01:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:01:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:01:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:01:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:39:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:51:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:51:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:51:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:51:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:51:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:51:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:51:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:51:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:24:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:52:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:34:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:59:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:55:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:13:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:24:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:24:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:24:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:24:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:56:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:03:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:03:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:03:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:03:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:47:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top