SCARD

Suspicious activity by IP address 40.76.107.218

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:36:56 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 40.76.107.218

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 404
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 404

Detailed activity by IP address 40.76.107.218

Timestamp Description Protocol Destination Port
2026-08-19 19:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:28:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:28:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:28:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:28:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:28:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:12:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:04:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:54:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:33:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:33:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:33:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:33:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:28:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:28:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:26:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:26:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:12:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:32:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:32:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:32:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:32:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:32:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:32:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:32:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:32:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:28:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:51:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:21:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:21:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:21:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:21:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:21:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:21:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:21:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:21:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:27:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:59:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:13:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:20:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:46:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:46:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:46:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:46:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:46:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:46:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:23:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:53:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:53:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:53:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:53:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:53:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:29:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:08:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:58:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:28:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:45:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:27:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:27:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:45:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:45:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:45:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:45:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:15:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:15:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 02:15:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 02:15:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:21:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:21:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:21:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:21:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:46:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:46:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:38:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:38:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:38:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:38:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:06:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:06:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:06:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:06:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:02:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:25:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:29:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:10:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:10:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:10:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:10:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:10:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:10:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:41:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:41:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:40:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top