SCARD

Suspicious activity by IP address 52.160.34.85

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 17 Aug 2026 04:19:10 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 52.160.34.85

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 312
ET INFO WinRM wsman Access - Possible Lateral Movement 312

Detailed activity by IP address 52.160.34.85

Timestamp Description Protocol Destination Port
2026-08-17 04:19:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:19:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:19:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:53:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:20:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:09:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:05:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:18:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:18:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:18:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:18:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:18:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:18:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 23:18:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 23:18:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:05:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 02:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 04:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:50:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:18:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 08:14:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 07:50:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:07:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:07:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:07:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:07:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:07:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:07:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 08:07:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 08:07:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:09:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:32:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 04:00:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:10:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:51:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:51:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:51:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:51:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:51:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:51:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:51:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:51:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 20:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 19:21:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:55:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:15:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 14:07:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:48:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:48:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:48:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:48:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:48:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:48:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:48:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:48:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 09:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:24:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 06:48:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:56:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 20:53:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 20:53:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:44:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 07:44:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 07:44:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 07:44:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:07:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 05:43:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:47:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:18:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:16:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:54:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:13:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:13:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:23:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:23:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:23:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:23:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:02:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:58:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:58:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:58:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:58:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:29:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:53:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:53:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:53:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:53:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:05:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:59:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:59:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:59:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:59:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:16:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top