SCARD

Suspicious activity by IP address 48.217.65.168

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 09:55:05 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 48.217.65.168

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 220
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 220

Detailed activity by IP address 48.217.65.168

Timestamp Description Protocol Destination Port
2026-07-06 09:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:59:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:51:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:51:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:20:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:40:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:02:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:00:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:00:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:00:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:00:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:59:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:59:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:59:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:59:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:59:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:48:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:48:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:48:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:48:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:01:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:54:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:35:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:45:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:45:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:45:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:45:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:50:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:50:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:50:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:50:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:08:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:03:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:15:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:15:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:15:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:15:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:44:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:06:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:59:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:59:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:59:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:59:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:42:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:42:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:42:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:42:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:35:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:35:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:35:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:35:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:55:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:55:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:15:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:15:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:15:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:15:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:47:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:47:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:47:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:47:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 20:12:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 20:12:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:05:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:05:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 17:05:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 17:05:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 23:11:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 23:11:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 23:11:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 23:11:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 21:29:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 21:29:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 21:29:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 21:29:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 19:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 19:10:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 19:10:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 16:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 16:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 16:16:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 16:16:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 14:06:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 14:06:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 14:06:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 14:06:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:22:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:22:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:41:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:41:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:57:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 04:57:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 04:57:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 04:57:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 00:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 00:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 00:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 00:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:40:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:40:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:40:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:40:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 17:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 17:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:31:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:31:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:31:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:31:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 08:05:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 08:05:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 08:05:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 08:05:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 04:02:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 04:02:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 04:02:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 04:02:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top