SCARD

Suspicious activity by IP address 52.152.147.30

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:26:30 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 52.152.147.30

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 262
ET INFO WinRM wsman Access - Possible Lateral Movement 262

Detailed activity by IP address 52.152.147.30

Timestamp Description Protocol Destination Port
2026-08-19 19:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:17:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:44:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:44:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:43:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:43:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:25:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:00:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:44:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:19:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:19:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:19:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:19:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:25:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:55:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:03:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:50:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:20:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:54:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 23:24:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:22:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:04:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 21:25:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 19:33:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:41:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 04:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:58:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:58:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:36:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:36:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:33:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:57:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 01:50:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:27:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:27:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 23:27:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 23:27:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:49:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:45:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 18:47:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:11:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:02:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:19:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:57:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:28:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 08:34:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:48:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:55:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 04:36:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:49:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 23:30:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:06:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:41:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 21:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:03:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 08:03:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:03:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 08:03:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:13:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:13:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:13:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:13:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:40:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:40:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:40:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:40:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:19:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:08:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:08:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:08:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:08:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:04:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:01:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:01:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 00:01:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 00:01:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:53:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:27:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top