SCARD

Suspicious activity by IP address 45.194.20.244

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:01:19 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 45.194.20.244

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 108
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 108

Detailed activity by IP address 45.194.20.244

Timestamp Description Protocol Destination Port
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:20:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:20:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:20:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:20:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:33:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:09:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:05:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:35:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:35:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:35:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:35:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:57:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:57:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:41:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:25:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:25:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:07:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:26:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:26:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:26:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:26:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:07:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:07:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:07:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:07:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top