SCARD

Suspicious activity by IP address 48.199.19.39

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 09:11:45 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 48.199.19.39

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 164
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 164

Detailed activity by IP address 48.199.19.39

Timestamp Description Protocol Destination Port
2026-07-06 09:11:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:11:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:31:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:51:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:51:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:30:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:02:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:33:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:33:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:33:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:33:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:31:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:31:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:31:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:31:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:44:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:06:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:50:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:50:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:50:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:50:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:12:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:12:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:44:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:44:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:44:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:44:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:43:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:50:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:39:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:39:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:39:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:39:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:44:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:09:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:25:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:25:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:25:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:25:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:24:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:24:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:04:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:04:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:04:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:04:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:02:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:02:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:01:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:01:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:46:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:46:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:43:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:43:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:43:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:43:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:58:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:58:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 03:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 03:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:17:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:17:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:18:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 16:18:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:18:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 16:18:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 14:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 14:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 14:53:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 14:53:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:05:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:05:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:05:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:05:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:29:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:29:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:29:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:29:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:56:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:56:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:56:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:56:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:11:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:11:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:11:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:11:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:16:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:16:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:16:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:16:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:00:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:00:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:00:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:00:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:47:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:47:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:47:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:47:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:53:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 15:53:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:53:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 15:53:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:46:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:46:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:40:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:40:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 02:40:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 02:40:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top