SCARD

Suspicious activity by IP address 47.119.123.3

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:19:50 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 47.119.123.3

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 338
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 338

Detailed activity by IP address 47.119.123.3

Timestamp Description Protocol Destination Port
2026-08-19 19:19:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:19:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:30:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:30:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 05:30:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 05:30:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 04:05:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:38:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:12:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:18:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:18:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 22:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:18:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 22:18:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:34:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:34:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:34:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:34:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:34:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:34:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:24:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:24:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:24:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:24:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:24:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:56:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:56:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:56:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:56:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:56:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:56:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 06:56:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 06:56:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:53:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:02:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:11:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:51:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:51:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:51:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:51:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:34:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:15:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:08:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:08:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:08:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:08:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:08:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:08:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:06:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:35:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 06:22:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 09:04:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:34:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:30:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:30:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:30:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:30:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:30:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:30:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:30:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:30:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:18:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:09:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:37:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:11:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:29:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:57:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:30:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:28:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:09:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:30:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:52:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:40:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:41:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:41:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:41:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:41:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:41:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:41:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:58:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:57:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:57:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:50:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:50:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:50:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:50:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:09:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:09:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:09:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:09:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:07:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:34:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:24:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:24:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:24:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:24:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:49:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:49:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:49:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:49:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:35:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:06:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:20:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:20:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:26:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:26:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:00:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top