SCARD

Suspicious activity by IP address 78.142.218.159

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 08:20:29 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 78.142.218.159

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 152
ET INFO WinRM wsman Access - Possible Lateral Movement 152

Detailed activity by IP address 78.142.218.159

Timestamp Description Protocol Destination Port
2026-07-06 08:20:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:20:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:20:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:34:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:34:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:34:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:34:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:07:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:27:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:04:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:04:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:04:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:04:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:55:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:30:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:30:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:30:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:30:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:59:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:59:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:59:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:59:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:58:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:48:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:45:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:45:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:36:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:57:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:41:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:34:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:31:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:24:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:24:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:24:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:24:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:20:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:26:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:43:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:45:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:45:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:45:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:45:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:45:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:45:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:29:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:42:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:45:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:45:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:45:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:45:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:26:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:26:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:57:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:57:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:49:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:49:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:49:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:49:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:58:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:58:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:43:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:43:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top