SCARD

Suspicious activity by IP address 4.247.139.22

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 17 Aug 2026 04:26:30 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 4.247.139.22

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 314
ET INFO WinRM wsman Access - Possible Lateral Movement 314

Detailed activity by IP address 4.247.139.22

Timestamp Description Protocol Destination Port
2026-08-17 04:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:21:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:02:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:19:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:34:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:59:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:59:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:59:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:59:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:59:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:59:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:59:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:59:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:35:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:35:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:29:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:29:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:37:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:56:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:29:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:47:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:52:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:59:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:09:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:50:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:07:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:38:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:07:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:14:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:43:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:20:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:43:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:43:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:43:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:43:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:40:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:40:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:40:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:40:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:35:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:46:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:46:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:46:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:46:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:50:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:26:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:26:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:26:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:26:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:19:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:19:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:44:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:05:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:25:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:25:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:55:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:55:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:54:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:28:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:28:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:34:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:34:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:34:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:34:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:57:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:49:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:49:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:22:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:22:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:22:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:22:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:57:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top