SCARD

Suspicious activity by IP address 52.255.171.151

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 16:30:17 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 52.255.171.151

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 420
ET INFO WinRM wsman Access - Possible Lateral Movement 420

Detailed activity by IP address 52.255.171.151

Timestamp Description Protocol Destination Port
2026-07-06 16:30:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:30:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:30:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:05:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:05:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:05:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:05:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:20:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:47:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:47:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:47:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:47:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:31:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:01:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:01:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:22:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:22:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:59:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:31:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:56:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:56:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:56:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:56:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:25:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:25:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:25:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:06:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:06:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:06:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:06:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:05:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:41:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:41:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:41:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:41:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:44:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:44:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:44:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:44:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:29:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:09:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:19:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:19:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:19:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:19:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:59:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:53:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:53:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:53:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:53:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:43:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:43:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:19:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:19:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:19:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:19:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:19:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:27:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:27:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:27:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:27:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:42:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:42:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:27:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:27:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:26:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:21:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:21:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:58:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:46:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:46:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:04:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:04:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:04:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:04:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:43:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:43:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:43:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:43:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:03:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:42:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:32:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:32:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:32:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:32:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top