SCARD

Suspicious activity by IP address 42.51.42.17

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:43:49 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 42.51.42.17

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 108
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 108

Detailed activity by IP address 42.51.42.17

Timestamp Description Protocol Destination Port
2026-07-06 10:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:18:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:18:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:29:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:29:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:29:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:29:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:41:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:41:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:41:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:41:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:21:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:21:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:36:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:36:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:36:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:36:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:36:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:10:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:10:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:10:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:10:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:10:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:10:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:10:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:10:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:15:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:40:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:40:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:40:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:40:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:39:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:39:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:39:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:39:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:23:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:23:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:37:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:37:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:51:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:51:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:18:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:18:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:18:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:18:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:51:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:51:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:51:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:51:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:53:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:53:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:53:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:53:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:53:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:53:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:33:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:33:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:33:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:33:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:33:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:33:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:36:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:15:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:44:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:59:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:57:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:56:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:56:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:56:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:56:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:56:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:56:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:56:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:56:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:18:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:18:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:18:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:18:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:37:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:12:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:32:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:32:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:32:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:32:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:43:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:43:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:43:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:43:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:42:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:42:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:42:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:42:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:41:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:41:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:41:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:41:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:04:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:04:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 14:42:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 14:42:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 14:42:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 14:42:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top