SCARD

Suspicious activity by IP address 20.57.1.168

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 07:32:04 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.57.1.168

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 128
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 128

Detailed activity by IP address 20.57.1.168

Timestamp Description Protocol Destination Port
2026-07-06 07:32:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:32:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:32:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:32:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:31:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:24:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:24:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:24:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:24:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:23:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:13:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:13:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:35:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:35:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:35:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:35:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:30:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:05:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:05:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:05:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:10:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:10:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:10:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:10:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:09:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:52:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:17:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:17:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:50:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:50:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:50:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:50:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:50:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:50:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:50:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:50:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:31:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:55:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:55:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:55:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:55:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:20:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:44:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:44:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 05:44:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 05:44:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:52:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:52:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:52:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:52:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:36:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 18:36:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:36:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 18:36:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:08:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:08:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 17:41:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 17:41:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 17:41:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 17:41:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:48:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 06:48:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:48:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 06:48:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:30:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 05:30:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:30:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 05:30:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 03:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 03:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 03:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 03:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 01:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 01:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 01:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:41:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 22:41:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 18:05:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 18:05:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:23:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:23:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:23:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:23:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:02:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:02:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:11:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:11:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:11:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:11:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top