SCARD

Suspicious activity by IP address 98.126.237.11

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:08:43 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 98.126.237.11

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 350
ET INFO WinRM wsman Access - Possible Lateral Movement 350

Detailed activity by IP address 98.126.237.11

Timestamp Description Protocol Destination Port
2026-07-06 11:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:04:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:04:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:37:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:37:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:37:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:37:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:32:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:32:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:32:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:32:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:12:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:12:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:53:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:15:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:10:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:42:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:11:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:57:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:57:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:57:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:47:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:42:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:42:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:39:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:39:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:36:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:36:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:36:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:36:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:10:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:10:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:10:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:10:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:32:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:32:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:32:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:32:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:29:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:29:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:14:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:14:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:14:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:14:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:09:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:45:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:45:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:45:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:45:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:22:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:22:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:22:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:22:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:56:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:56:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:56:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:56:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:55:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:55:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:43:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:43:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:43:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:43:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:05:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:05:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:05:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:05:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:53:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:53:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:55:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:55:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:57:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:57:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:09:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:09:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:09:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:09:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:53:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:53:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:53:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:53:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:41:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:40:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:40:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:50:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:35:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:35:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:35:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:35:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:03:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:03:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:36:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:36:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:36:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:36:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:02:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:27:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:27:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:17:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:17:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:13:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:13:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:13:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:13:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:11:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:11:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:11:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:11:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:08:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:08:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:07:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:07:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:07:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:07:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:07:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:50:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:50:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:50:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:50:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:11:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:11:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:11:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:11:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:12:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:35:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:17:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:17:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:46:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:46:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:17:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top