SCARD

Suspicious activity by IP address 46.38.233.51

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 09:04:08 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 46.38.233.51

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 106
ET INFO WinRM wsman Access - Possible Lateral Movement 106

Detailed activity by IP address 46.38.233.51

Timestamp Description Protocol Destination Port
2026-07-06 09:04:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:04:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:04:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:04:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:16:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:16:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:16:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:16:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:13:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:13:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:13:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:13:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:43:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:43:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:43:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:43:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:42:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:30:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:30:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:30:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:30:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:22:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:22:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:22:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:22:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:53:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:11:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:33:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:33:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:33:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:47:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:26:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:26:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:51:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:51:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:51:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:51:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top