SCARD

Suspicious activity by IP address 41.139.139.5

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:23:26 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 41.139.139.5

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 406
ET INFO WinRM wsman Access - Possible Lateral Movement 406

Detailed activity by IP address 41.139.139.5

Timestamp Description Protocol Destination Port
2026-08-19 19:23:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:23:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:23:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:23:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:44:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 06:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 06:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:51:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:26:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:26:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:26:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:26:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:22:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:22:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:22:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:06:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:50:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:34:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:18:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:18:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 01:57:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-17 01:57:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-17 01:57:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 80
2026-08-17 01:57:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 80
2026-08-15 02:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:36:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:36:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:42:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:12:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:12:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:12:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:12:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:27:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:27:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:27:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:27:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 04:01:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 04:01:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:27:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:00:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:00:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:00:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:00:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:53:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:53:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:53:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:53:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:53:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:53:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:53:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:53:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:22:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:21:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:21:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 03:21:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 03:21:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 01:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 01:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:30:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:42:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:23:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:23:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:23:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:23:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:23:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:23:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:18:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:18:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:18:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:18:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:18:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:18:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:18:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:18:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:54:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:54:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:54:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:54:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 18:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:54:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 18:54:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:03:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:10:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:15:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:15:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:15:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:15:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 05:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:20:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:37:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:43:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:43:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:43:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:43:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:43:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:43:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:04:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:04:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:49:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:37:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:37:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:09:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:09:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:09:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:09:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:09:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:09:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:09:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:09:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:55:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:55:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:55:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:55:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:15:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:56:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:56:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:56:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:56:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:56:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:56:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:56:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:56:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:05:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:49:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:49:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:26:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:06:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:30:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:08:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:41:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:20:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:41:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:41:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top