SCARD

Suspicious activity by IP address 42.230.193.130

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Sat, 15 Aug 2026 04:20:16 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 42.230.193.130

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 250
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 250

Detailed activity by IP address 42.230.193.130

Timestamp Description Protocol Destination Port
2026-08-15 04:20:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 04:20:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 04:20:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 04:20:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:44:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:44:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:19:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:19:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:19:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:19:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:59:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:59:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:59:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:59:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:43:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:43:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:43:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:43:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:49:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:49:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:49:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:49:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:18:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:18:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:18:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:18:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:18:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:18:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:31:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:09:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:09:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:09:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:09:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:48:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:31:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:31:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:31:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:31:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:31:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:31:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:31:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:31:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:53:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:53:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:53:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:53:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:53:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:53:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:53:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:53:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:36:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:12:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:12:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:12:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:12:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:12:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:12:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:12:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:12:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:31:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:31:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:31:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:31:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:31:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:59:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:24:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:05:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:20:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:20:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:20:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:20:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:02:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:50:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:50:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:50:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:50:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:09:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:09:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:09:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:09:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:50:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:50:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:58:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:35:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:16:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:58:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:58:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:44:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:44:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:44:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:44:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 17:02:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:09:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:02:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:02:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:02:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:02:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:56:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:22:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:22:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:22:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:22:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:01:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:01:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:01:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:01:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:45:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:29:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:29:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:29:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:29:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:02:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:35:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:35:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:35:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:35:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:18:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:18:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:18:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:18:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:55:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:32:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:32:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:32:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:32:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:12:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:55:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:30:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 10:09:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:49:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:49:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:49:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:49:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:18:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:18:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:18:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:18:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:18:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:18:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:18:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:18:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:56:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:33:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:16:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:16:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:16:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:16:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:16:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:16:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:16:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:16:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:50:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:50:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:02:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:02:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:02:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:44:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:44:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:44:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:44:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:45:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:45:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:45:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:45:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:45:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:45:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:45:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:45:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:25:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:25:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:25:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:25:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:39:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:39:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:12:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:12:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:11:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:11:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:11:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:11:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top