SCARD

Suspicious activity by IP address 129.28.69.253

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:59:02 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 129.28.69.253

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 118
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 118

Detailed activity by IP address 129.28.69.253

Timestamp Description Protocol Destination Port
2026-07-06 10:59:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:59:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:59:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:30:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:30:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:29:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:11:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:11:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:11:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:11:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:40:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:40:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:10:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:35:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:35:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:35:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:35:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:21:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:21:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:21:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:21:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:29:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:29:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:29:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:29:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:20:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:20:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:20:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:20:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:20:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:28:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:28:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:28:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:28:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:28:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:36:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:36:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:36:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:36:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:26:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:26:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:26:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:26:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:26:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:26:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:26:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:29:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:01:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:01:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:58:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:58:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:14:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:14:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:14:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:14:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:56:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:56:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:56:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:56:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:16:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:16:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:52:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 15:43:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 15:43:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:40:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:40:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:31:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:31:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:38:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:38:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:38:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:38:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top