Below is a list of the last 500 suspicious interactions with this IP.
Last observed Mon, 06 Jul 2026 09:29:39 (Australia/Brisbane)
| Description | Count |
|---|---|
| ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | 160 |
| ET INFO WinRM wsman Access - Possible Lateral Movement | 160 |
| Timestamp | Description | Protocol | Destination Port |
|---|---|---|---|
| 2026-07-06 09:29:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 09:29:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 09:29:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 09:29:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:17:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:04:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:04:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:04:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:04:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 03:29:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 03:29:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 03:29:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 03:29:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:44:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:44:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:44:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:44:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:24:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:24:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:24:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:24:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:21:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:48:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:48:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:48:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:48:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:29:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:21:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:50:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:50:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:50:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:50:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:49:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:35:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:35:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:35:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:35:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:01:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:01:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:01:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:01:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:52:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:52:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:52:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:52:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:58:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:58:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:58:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:58:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:58:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:43:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 04:44:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 03:27:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 03:27:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 03:27:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 03:27:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:28 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:28 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:28 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:28 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:41:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:16:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:53:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 18:29:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 10:32:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 10:32:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 10:32:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 10:32:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 07:50:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 07:50:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 07:50:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 07:50:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 13:05:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 13:05:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 13:05:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 13:05:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 11:55:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 11:55:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 11:55:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 11:55:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 08:18:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 08:18:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 08:18:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 08:18:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 06:10:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 06:10:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 06:10:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 06:10:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 04:42:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 04:42:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 04:42:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-03 04:42:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-02 19:43:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-02 19:43:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-02 19:43:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-02 19:43:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 22:22:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 22:22:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 22:22:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 22:22:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 20:11:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 20:11:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 20:11:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 20:11:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 18:53:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 18:53:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 18:53:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 18:53:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 13:31:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 13:31:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 13:31:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 13:31:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 11:23:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 11:23:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 11:23:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 11:23:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 09:52:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 09:52:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 09:52:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 09:52:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 06:13:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 06:13:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 06:13:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 06:13:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 03:35:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 03:35:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 03:35:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 03:35:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 01:41:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 01:41:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 01:41:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-30 01:41:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 23:50:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 23:50:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 23:50:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 23:50:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 21:50:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 21:50:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 21:50:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 21:50:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 15:37:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 15:37:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 15:37:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 15:37:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 10:00:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 10:00:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 10:00:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 10:00:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 08:44:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 08:44:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 08:44:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 08:44:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 06:20:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 06:20:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 06:20:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 06:20:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 05:18:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 05:18:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 05:18:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 05:18:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 02:43:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 02:43:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 02:43:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-06-29 02:43:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
Back to top