SCARD

Suspicious activity by IP address 57.128.195.102

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:45:20 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 57.128.195.102

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 122
ET INFO WinRM wsman Access - Possible Lateral Movement 122

Detailed activity by IP address 57.128.195.102

Timestamp Description Protocol Destination Port
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:45:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:39:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:12:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:12:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:39:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:39:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:39:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:39:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:59:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:54:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:57:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:57:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:57:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:57:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:45:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:45:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:41:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:41:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:41:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:41:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:09:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:38:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:38:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:38:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:38:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:53:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:46:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:46:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:46:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:46:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:52:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:52:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:52:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:52:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:39:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:27:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:27:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:27:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:27:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:27:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:27:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:27:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:27:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:10:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:53:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:53:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:53:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:25:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:33:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:33:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:33:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:33:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:24:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:24:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 06:29:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 06:29:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top