_raw: Sat Jan 10 03:10:14 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=887 user=xrdp fd=11u ip_version=6 dvc_id=11564 transport=TCP


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=35573 pid=856 user=root fd=9u ip_version=4 dvc_id=8965 transport=TCP


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=658 user=dhcpcd fd=3u ip_version=4 dvc_id=9331 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     9999
tcp    43215
tcp    35573
tcp     4444
tcp       80
tcp     3350
tcp    36381
tcp     8080
tcp     3389

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw: Sat Jan 10 03:10:13 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1247803 user=pentester fd=3u ip_version=4 dvc_id=17270621 transport=TCP


_raw: Sat Jan 10 03:10:13 PM EST 2026 app=adaptixserver dest_ip=* dest_port=444 pid=538411 user=pentester fd=10u ip_version=6 dvc_id=15945713 transport=TCP


_raw: Sat Jan 10 03:10:13 PM EST 2026 app=adaptixserver dest_ip=* dest_port=4321 pid=538411 user=pentester fd=7u ip_version=6 dvc_id=15909286 transport=TCP


_raw: Sat Jan 10 03:10:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=376541 user=root fd=282u ip_version=6 dvc_id=15536417 transport=TCP


_raw: Sat Jan 10 03:10:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=376541 user=root fd=281u ip_version=6 dvc_id=15536411 transport=TCP


_raw: Sat Jan 10 03:10:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=10933 transport=TCP


_raw: Sat Jan 10 03:10:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7619 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     3389
tcp     3350
tcp     7474
tcp     7687
tcp      444
tcp     4321


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     8889
tcp    34391
tcp     8080
tcp    44947
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    48467
udp       68
udp      546
tcp    42765
tcp     8889
tcp     3389
tcp    42321
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     5555
tcp     4444
tcp     4444
tcp       80
tcp     8889
tcp     6666
tcp     3350
tcp     8080
tcp     3389
tcp    33459


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1273036 user=pentester fd=37u ip_version=6 dvc_id=2530871 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=43615 pid=1273036 user=pentester fd=18u ip_version=6 dvc_id=2530819 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48218 pid=1056193 user=pentester fd=175u ip_version=4 dvc_id=2629162 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43720 pid=1056193 user=pentester fd=173u ip_version=4 dvc_id=2654001 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57935 pid=1056193 user=pentester fd=166u ip_version=4 dvc_id=2654004 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33410 pid=1056193 user=pentester fd=142u ip_version=4 dvc_id=2654085 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58885 pid=1056193 user=pentester fd=137u ip_version=4 dvc_id=2654008 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57278 pid=1056193 user=pentester fd=88u ip_version=4 dvc_id=2654424 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53362 pid=1056193 user=pentester fd=81u ip_version=4 dvc_id=2653990 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57786 pid=1056193 user=pentester fd=78u ip_version=4 dvc_id=2654677 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42175 pid=1056193 user=pentester fd=48u ip_version=4 dvc_id=2653988 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59742 pid=1056193 user=pentester fd=33u ip_version=4 dvc_id=2654068 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53127 pid=1056193 user=pentester fd=18u ip_version=4 dvc_id=2654668 transport=UDP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346377 user=root fd=4u ip_version=6 dvc_id=547689 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346371 user=root fd=4u ip_version=4 dvc_id=546665 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345824 user=root fd=4u ip_version=6 dvc_id=545158 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345817 user=root fd=4u ip_version=4 dvc_id=543644 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345809 user=root fd=4u ip_version=6 dvc_id=543640 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345801 user=root fd=4u ip_version=4 dvc_id=546974 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39035 pid=345056 user=root fd=9u ip_version=4 dvc_id=542090 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=8833 transport=TCP


_raw: Sat Jan 10 03:10:00 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7900 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    44892
udp       68
udp      546
tcp     4403
tcp     8889
tcp     8080
tcp     3350
tcp    37843
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    51258
udp    44325
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8445
tcp     5000
tcp     8889
tcp    33419
tcp    44941
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:09:28 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1091008 user=pentester fd=37u ip_version=6 dvc_id=3005663 transport=TCP


_raw: Sat Jan 10 03:09:28 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34005 pid=1091008 user=pentester fd=18u ip_version=6 dvc_id=3003306 transport=TCP


_raw: Sat Jan 10 03:09:28 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354352 user=root fd=4u ip_version=6 dvc_id=671616 transport=TCP


_raw: Sat Jan 10 03:09:28 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354345 user=root fd=4u ip_version=4 dvc_id=671610 transport=TCP


_raw: Sat Jan 10 03:09:28 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=45447 pid=352062 user=root fd=7u ip_version=4 dvc_id=664561 transport=TCP


_raw: Sat Jan 10 03:09:28 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12365 transport=TCP


_raw: Sat Jan 10 03:09:28 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=999 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp    34005
tcp     3389
tcp     8080


_raw:
Proto   Port
udp     5353
udp     5353
udp     7359
udp       68
udp     7359
udp      546
tcp     8889
tcp       22
tcp    38561
tcp     8096
tcp     8080
tcp       22
tcp     3350
tcp     3389
tcp     8096


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43671
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:09:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5177 user=xrdp fd=11u ip_version=6 dvc_id=20540 transport=TCP


_raw: Sat Jan 10 03:09:13 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=7u ip_version=6 dvc_id=15709 transport=TCP


_raw: Sat Jan 10 03:09:13 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=6u ip_version=4 dvc_id=15707 transport=TCP


_raw: Sat Jan 10 03:09:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7057 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp    38707
udp      546
tcp    40973
tcp       80
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp    58223
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     8080
tcp       22
tcp    39287
tcp     3350


_raw: Sat Jan 10 03:09:00 PM EST 2026 app=cursor dest_ip=127.0.0.1 dest_port=62091 pid=871088 user=pentester fd=49u ip_version=4 dvc_id=2159633 transport=TCP


_raw: Sat Jan 10 03:09:00 PM EST 2026 app=python dest_ip=* dest_port=8081 pid=812755 user=pentester fd=3u ip_version=4 dvc_id=1983570 transport=TCP


_raw: Sat Jan 10 03:09:00 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=36179 pid=804058 user=root fd=9u ip_version=4 dvc_id=1954168 transport=TCP


_raw: Sat Jan 10 03:09:00 PM EST 2026 app=cursor dest_ip=127.0.0.1 dest_port=32919 pid=675119 user=pentester fd=45u ip_version=4 dvc_id=1309931 transport=TCP


_raw: Sat Jan 10 03:09:00 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=862 user=xrdp fd=11u ip_version=6 dvc_id=9901 transport=TCP


_raw: Sat Jan 10 03:09:00 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=9273 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8081
tcp    36179
tcp    62091
tcp    32919
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     5555
tcp     8889
tcp     8000
tcp     3350
tcp    36523
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    50316
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    41069
tcp     3350
tcp     3389
tcp     8080
tcp    38993


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     4444
tcp     8889
tcp    46207
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8081
tcp    44845
tcp     8080


_raw: Sat Jan 10 03:08:34 PM EST 2026 app=java dest_ip=* dest_port=7474 pid=2138255 user=root fd=282u ip_version=6 dvc_id=3463549 transport=TCP


_raw: Sat Jan 10 03:08:34 PM EST 2026 app=java dest_ip=* dest_port=7687 pid=2138255 user=root fd=281u ip_version=6 dvc_id=3463540 transport=TCP


_raw: Sat Jan 10 03:08:34 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41739 pid=245803 user=root fd=9u ip_version=4 dvc_id=334765 transport=TCP


_raw: Sat Jan 10 03:08:34 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=7u ip_version=6 dvc_id=311986 transport=TCP


_raw: Sat Jan 10 03:08:34 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=6u ip_version=4 dvc_id=311984 transport=TCP


_raw: Sat Jan 10 03:08:34 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10697 transport=TCP


_raw: Sat Jan 10 03:08:34 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7973 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp       22
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp     7687


_raw:
Proto   Port
udp    45033
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=33863 pid=498334 user=pentester fd=40u ip_version=4 dvc_id=1819137 transport=TCP


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=493417 user=pentester fd=37u ip_version=6 dvc_id=1800350 transport=TCP


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41585 pid=493417 user=pentester fd=18u ip_version=6 dvc_id=1799161 transport=TCP


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8888 pid=237945 user=root fd=7u ip_version=4 dvc_id=328219 transport=TCP


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=237382 user=root fd=7u ip_version=4 dvc_id=327255 transport=TCP


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=237359 user=root fd=7u ip_version=4 dvc_id=327745 transport=TCP


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=884 user=xrdp fd=11u ip_version=6 dvc_id=10649 transport=TCP


_raw: Sat Jan 10 03:08:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=8623 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    33863
tcp     7474
tcp     7687
tcp     8888
tcp     3389
tcp    41585
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     9999
tcp     4445
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    38008
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     8000
tcp    38287
tcp     3350
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp       53
tcp     8889
tcp     8080
tcp     7687
tcp     7474
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    54937
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8081
tcp    36179
tcp    62091
tcp     8889
tcp    32919
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    34646
udp       68
udp      546
tcp     8889
tcp    42409
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw: Sat Jan 10 03:06:46 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1921 user=root fd=13u ip_version=4 dvc_id=12706 transport=TCP


_raw: Sat Jan 10 03:06:46 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=899 user=xrdp fd=11u ip_version=6 dvc_id=13313 transport=TCP


_raw: Sat Jan 10 03:06:46 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=684 user=dhcpcd fd=3u ip_version=4 dvc_id=9304 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw:
Proto   Port
udp    37700
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    46527
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    36911
tcp     4444
tcp     9001
tcp    15372
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp    33126
udp      546
tcp    37581
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp     8000
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687
tcp      444
tcp     4321


_raw:
Proto   Port
udp       68
udp      546
tcp    45073
tcp     8889
tcp     3350
tcp    40965
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    36101
tcp     8080
tcp     3350
tcp    39079
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     5000
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    58259
udp       68
udp      546
tcp     5985
tcp     5986
tcp     9389
tcp       80
tcp      135
tcp      445
tcp     8889
tcp     6666
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8080
tcp     8889
tcp     5555
tcp     3389
tcp    11601
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp     7687


_raw: Sat Jan 10 03:05:23 PM EST 2026 file_hash=SHA2-256(stdin)= c8e7c671581a1f6694dfdfd89bc4643c0ff4e2aec77d1ddc0bf9dafd3057e12e


_raw: Sat Jan 10 03:05:23 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=60393 user=pentester fd=3u ip_version=4 dvc_id=131438 transport=TCP


_raw: Sat Jan 10 03:05:23 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=6805 user=root fd=13u ip_version=4 dvc_id=27537 transport=TCP


_raw: Sat Jan 10 03:05:23 PM EST 2026 app=chrome dest_ip=224.0.0.251 dest_port=5353 pid=2121 user=pentester fd=254u ip_version=4 dvc_id=20129 transport=UDP


_raw: Sat Jan 10 03:05:23 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=9196 transport=TCP


_raw: Sat Jan 10 03:05:23 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=8482 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp    34005
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42099
tcp    42065
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    52256
udp       68
udp      546
tcp     8889
tcp       80
tcp     8888
tcp     1883
tcp     9392
tcp     5432
tcp     1883
tcp     5432
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     5555
tcp     4444
tcp     4444
tcp       80
tcp     8889
tcp     6666
tcp     3350
tcp     8080
tcp     3389
tcp    33459


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8445
tcp     5000
tcp     4444
tcp     8889
tcp    33419
tcp    44941
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp     5353
udp     5353
udp     7359
udp       68
udp     7359
udp      546
tcp     8889
tcp       22
tcp    38561
tcp     8096
tcp     8080
tcp       22
tcp     3350
tcp     3389
tcp     8096


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    55584
udp       68
udp      546
tcp     8889
tcp    43671
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     5555
tcp     8889
tcp     8000
tcp     3350
tcp    36523
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp    38707
udp      546
tcp    40973
tcp       80
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     8080
tcp       22
tcp    39287
tcp     3350


_raw:
Proto   Port
udp    50316
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    41069
tcp     3350
tcp     3389
tcp     8080
tcp    38993


_raw: Sat Jan 10 03:03:45 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50316 pid=2942 user=pentester fd=228u ip_version=4 dvc_id=332460 transport=UDP


_raw: Sat Jan 10 03:03:45 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1970 user=root fd=13u ip_version=4 dvc_id=11795 transport=TCP


_raw: Sat Jan 10 03:03:45 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=893 user=xrdp fd=11u ip_version=6 dvc_id=12405 transport=TCP


_raw: Sat Jan 10 03:03:45 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=665 user=dhcpcd fd=3u ip_version=4 dvc_id=7597 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     4444
tcp     8889
tcp    46207
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8081
tcp    44845
tcp     8080


_raw:
Proto   Port
udp    45033
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     9999
tcp     4445
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     8000
tcp    38287
tcp     3350
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp       53
tcp     8889
tcp     8080
tcp     7687
tcp     7474
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1273036 user=pentester fd=37u ip_version=6 dvc_id=2530871 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=43615 pid=1273036 user=pentester fd=18u ip_version=6 dvc_id=2530819 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47198 pid=1056193 user=pentester fd=181u ip_version=4 dvc_id=2634620 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51151 pid=1056193 user=pentester fd=176u ip_version=4 dvc_id=2634528 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=cursor dest_ip=127.0.0.1 dest_port=39892 pid=869437 user=pentester fd=47u ip_version=4 dvc_id=2137281 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48218 pid=1056193 user=pentester fd=175u ip_version=4 dvc_id=2629162 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=python dest_ip=* dest_port=8081 pid=812755 user=pentester fd=3u ip_version=4 dvc_id=1983570 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44671 pid=1056193 user=pentester fd=173u ip_version=4 dvc_id=2632379 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=36179 pid=804058 user=root fd=9u ip_version=4 dvc_id=1954168 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53775 pid=1056193 user=pentester fd=168u ip_version=4 dvc_id=2632392 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=cursor dest_ip=127.0.0.1 dest_port=32919 pid=675119 user=pentester fd=45u ip_version=4 dvc_id=1309931 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39536 pid=1056193 user=pentester fd=142u ip_version=4 dvc_id=2628525 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=862 user=xrdp fd=11u ip_version=6 dvc_id=9901 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45753 pid=1056193 user=pentester fd=138u ip_version=4 dvc_id=2628523 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=9273 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=36657 pid=1056193 user=pentester fd=131u ip_version=4 dvc_id=2628520 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59694 pid=1056193 user=pentester fd=100u ip_version=4 dvc_id=2628518 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47911 pid=1056193 user=pentester fd=48u ip_version=4 dvc_id=2632367 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56734 pid=1056193 user=pentester fd=33u ip_version=4 dvc_id=2632126 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49686 pid=1056193 user=pentester fd=18u ip_version=4 dvc_id=2632354 transport=UDP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346377 user=root fd=4u ip_version=6 dvc_id=547689 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346371 user=root fd=4u ip_version=4 dvc_id=546665 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345824 user=root fd=4u ip_version=6 dvc_id=545158 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345817 user=root fd=4u ip_version=4 dvc_id=543644 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345809 user=root fd=4u ip_version=6 dvc_id=543640 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345801 user=root fd=4u ip_version=4 dvc_id=546974 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39035 pid=345056 user=root fd=9u ip_version=4 dvc_id=542090 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=8833 transport=TCP


_raw: Sat Jan 10 03:01:52 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7900 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8081
tcp    36179
tcp    39892
tcp    32919
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    42409
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    44213
tcp     8889
tcp     8080
tcp     3389
tcp    38959
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw: Sat Jan 10 03:01:22 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=36205 user=pentester fd=37u ip_version=6 dvc_id=271999 transport=TCP


_raw: Sat Jan 10 03:01:22 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=46527 pid=36205 user=pentester fd=18u ip_version=6 dvc_id=272617 transport=TCP


_raw: Sat Jan 10 03:01:22 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=2958 user=root fd=13u ip_version=4 dvc_id=26714 transport=TCP


_raw: Sat Jan 10 03:01:22 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37700 pid=2304 user=pentester fd=79u ip_version=4 dvc_id=306012 transport=UDP


_raw: Sat Jan 10 03:01:22 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10009 transport=TCP


_raw: Sat Jan 10 03:01:22 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=655 user=dhcpcd fd=3u ip_version=4 dvc_id=9351 transport=UDP


_raw:
Proto   Port
udp    37700
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    46527
tcp     8080


_raw:
Proto   Port
udp       68
udp    33126
udp      546
tcp    37581
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp     8000
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=43215 pid=154168 user=pentester fd=39u ip_version=4 dvc_id=561443 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=127364 user=pentester fd=37u ip_version=6 dvc_id=474389 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36381 pid=127364 user=pentester fd=18u ip_version=6 dvc_id=471496 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=111832 user=pentester fd=3u ip_version=4 dvc_id=408055 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=111454 user=pentester fd=7u ip_version=4 dvc_id=405036 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=nc dest_ip=* dest_port=9999 pid=40493 user=pentester fd=3u ip_version=4 dvc_id=121859 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=887 user=xrdp fd=11u ip_version=6 dvc_id=11564 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=35573 pid=856 user=root fd=9u ip_version=4 dvc_id=8965 transport=TCP


_raw: Sat Jan 10 03:01:06 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=658 user=dhcpcd fd=3u ip_version=4 dvc_id=9331 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     9999
tcp    43215
tcp    35573
tcp     4444
tcp       80
tcp     3350
tcp    36381
tcp     8080
tcp     3389


_raw: Sat Jan 10 03:01:05 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1247803 user=pentester fd=3u ip_version=4 dvc_id=17270621 transport=TCP


_raw: Sat Jan 10 03:01:05 PM EST 2026 app=adaptixserver dest_ip=* dest_port=444 pid=538411 user=pentester fd=10u ip_version=6 dvc_id=15945713 transport=TCP


_raw: Sat Jan 10 03:01:05 PM EST 2026 app=adaptixserver dest_ip=* dest_port=4321 pid=538411 user=pentester fd=7u ip_version=6 dvc_id=15909286 transport=TCP


_raw: Sat Jan 10 03:01:05 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=376541 user=root fd=282u ip_version=6 dvc_id=15536417 transport=TCP


_raw: Sat Jan 10 03:01:05 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=376541 user=root fd=281u ip_version=6 dvc_id=15536411 transport=TCP


_raw: Sat Jan 10 03:01:05 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=10933 transport=TCP


_raw: Sat Jan 10 03:01:05 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7619 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     3389
tcp     3350
tcp     7474
tcp     7687
tcp      444
tcp     4321


_raw: Sat Jan 10 03:00:58 PM EST 2026 file_hash=SHA2-256(stdin)= bc0ecc1e68f2f3153eab7eaf9ac530baec997ed38a8b653c638df68c15a87c1a


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=python3 dest_ip=* dest_port=8888 pid=1226225 user=pentester fd=3u ip_version=4 dvc_id=5235843 transport=TCP


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=448323 user=_gvm fd=4u ip_version=4 dvc_id=741210 transport=TCP


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=448318 user=_gvm fd=4u ip_version=4 dvc_id=735501 transport=TCP


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=447913 user=mosquitto fd=5u ip_version=4 dvc_id=728902 transport=TCP


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=419499 user=postgres fd=7u ip_version=4 dvc_id=675634 transport=TCP


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=372011 user=root fd=13u ip_version=4 dvc_id=582930 transport=TCP


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=881 user=xrdp fd=11u ip_version=6 dvc_id=11364 transport=TCP


_raw: Sat Jan 10 03:00:58 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=10273 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    45073
tcp     8889
tcp     3350
tcp    40965
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:00:33 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=36101 pid=1124640 user=pentester fd=39u ip_version=4 dvc_id=6018552 transport=TCP


_raw: Sat Jan 10 03:00:33 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1114417 user=pentester fd=37u ip_version=6 dvc_id=5988300 transport=TCP


_raw: Sat Jan 10 03:00:33 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39079 pid=1114417 user=pentester fd=18u ip_version=6 dvc_id=5987256 transport=TCP


_raw: Sat Jan 10 03:00:33 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49521 pid=1068259 user=pentester fd=157u ip_version=4 dvc_id=6801726 transport=UDP


_raw: Sat Jan 10 03:00:33 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47067 pid=1068259 user=pentester fd=119u ip_version=4 dvc_id=6801706 transport=UDP


_raw: Sat Jan 10 03:00:33 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11649 transport=TCP


_raw: Sat Jan 10 03:00:33 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5052 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    58259
udp       68
udp      546
tcp     5985
tcp     5986
tcp     9389
tcp       80
tcp      135
tcp      445
tcp     8889
tcp     6666
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=smbserver.py dest_ip=127.0.0.1 dest_port=52767 pid=2375508 user=pentester fd=5u ip_version=4 dvc_id=4050600 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=smbserver.py dest_ip=127.0.0.1 dest_port=54067 pid=2375508 user=pentester fd=4u ip_version=4 dvc_id=4050599 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=smbserver.py dest_ip=* dest_port=445 pid=2375508 user=pentester fd=3u ip_version=4 dvc_id=4050598 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=java dest_ip=* dest_port=7474 pid=2138255 user=root fd=282u ip_version=6 dvc_id=3463549 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=java dest_ip=* dest_port=7687 pid=2138255 user=root fd=281u ip_version=6 dvc_id=3463540 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41739 pid=245803 user=root fd=9u ip_version=4 dvc_id=334765 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=7u ip_version=6 dvc_id=311986 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=6u ip_version=4 dvc_id=311984 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10697 transport=TCP


_raw: Sat Jan 10 03:00:26 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7973 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp    54067
tcp       22
tcp      445
tcp    52767
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp     7687


_raw:
Proto   Port
udp       68
udp      546
tcp     8080
tcp     8889
tcp     5555
tcp     3389
tcp    11601
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     5000
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:00:19 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1091008 user=pentester fd=37u ip_version=6 dvc_id=3005663 transport=TCP


_raw: Sat Jan 10 03:00:19 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34005 pid=1091008 user=pentester fd=18u ip_version=6 dvc_id=3003306 transport=TCP


_raw: Sat Jan 10 03:00:19 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354352 user=root fd=4u ip_version=6 dvc_id=671616 transport=TCP


_raw: Sat Jan 10 03:00:19 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354345 user=root fd=4u ip_version=4 dvc_id=671610 transport=TCP


_raw: Sat Jan 10 03:00:19 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=45447 pid=352062 user=root fd=7u ip_version=4 dvc_id=664561 transport=TCP


_raw: Sat Jan 10 03:00:19 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12365 transport=TCP


_raw: Sat Jan 10 03:00:19 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=999 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp    34005
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42099
tcp    42065
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    58823
udp       68
udp      546
tcp     8889
tcp       80
tcp     8888
tcp     1883
tcp     9392
tcp     5432
tcp     1883
tcp     5432
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=33863 pid=498334 user=pentester fd=40u ip_version=4 dvc_id=1819137 transport=TCP


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=493417 user=pentester fd=37u ip_version=6 dvc_id=1800350 transport=TCP


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41585 pid=493417 user=pentester fd=18u ip_version=6 dvc_id=1799161 transport=TCP


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8888 pid=237945 user=root fd=7u ip_version=4 dvc_id=328219 transport=TCP


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=237382 user=root fd=7u ip_version=4 dvc_id=327255 transport=TCP


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=237359 user=root fd=7u ip_version=4 dvc_id=327745 transport=TCP


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=884 user=xrdp fd=11u ip_version=6 dvc_id=10649 transport=TCP


_raw: Sat Jan 10 03:00:15 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=8623 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    33863
tcp     7474
tcp     7687
tcp     8888
tcp     3389
tcp    41585
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     8889
tcp    34391
tcp     8080
tcp    44947
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:00:05 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5177 user=xrdp fd=11u ip_version=6 dvc_id=20540 transport=TCP


_raw: Sat Jan 10 03:00:05 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=7u ip_version=6 dvc_id=15709 transport=TCP


_raw: Sat Jan 10 03:00:05 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=6u ip_version=4 dvc_id=15707 transport=TCP


_raw: Sat Jan 10 03:00:05 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7057 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    42765
tcp     8889
tcp     3389
tcp    42321
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Jan 10 03:00:01 PM EST 2026 file_hash=SHA2-256(stdin)= e619d382e06f1a9fcf7e1ebf91f6b4d077e8a5034af4ed0f8c44c7ffbbbcd8a5


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1229515 user=pentester fd=3u ip_version=4 dvc_id=3298043 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=nc dest_ip=* dest_port=6666 pid=1227342 user=pentester fd=3u ip_version=4 dvc_id=3290463 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=1202766 user=pentester fd=3u ip_version=4 dvc_id=3207734 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1190855 user=pentester fd=3u ip_version=4 dvc_id=3165186 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1186599 user=pentester fd=3u ip_version=4 dvc_id=3144100 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1133580 user=pentester fd=37u ip_version=6 dvc_id=2993490 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=33459 pid=1133580 user=pentester fd=18u ip_version=6 dvc_id=2992733 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=9794 transport=TCP


_raw: Sat Jan 10 03:00:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5935 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     5555
tcp     4444
tcp     4444
tcp       80
tcp     6666
tcp     3350
tcp     8080
tcp     3389
tcp    33459


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8445
tcp     5000
tcp     8889
tcp    33419
tcp    44941
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43671
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    46424
udp       68
udp      546
tcp     8889
tcp    42423
tcp     3389
tcp     8080
tcp     3350


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=11482 user=_bloodhound fd=8u ip_version=4 dvc_id=47034 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=11482 user=_bloodhound fd=6u ip_version=6 dvc_id=50255 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=10209 user=root fd=615u ip_version=6 dvc_id=49231 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=10209 user=root fd=614u ip_version=6 dvc_id=48721 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=sliver-server dest_ip=* dest_port=31337 pid=7558 user=pentester fd=13u ip_version=6 dvc_id=40790 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60851 pid=4334 user=pentester fd=145u ip_version=4 dvc_id=331792 transport=UDP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47595 pid=4334 user=pentester fd=18u ip_version=4 dvc_id=329431 transport=UDP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=node dest_ip=* dest_port=3001 pid=3929 user=pentester fd=26u ip_version=6 dvc_id=19326 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=node dest_ip=* dest_port=1337 pid=3672 user=planka fd=26u ip_version=6 dvc_id=23312 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=903 user=postgres fd=7u ip_version=4 dvc_id=9668 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=890 user=xrdp fd=11u ip_version=6 dvc_id=10884 transport=TCP


_raw: Sat Jan 10 02:59:09 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=659 user=dhcpcd fd=3u ip_version=4 dvc_id=7152 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     5555
tcp     8889
tcp     8000
tcp     3350
tcp    36523
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp    43005
tcp       22
tcp      445
tcp    42347
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp     7687


_raw:
Proto   Port
udp    50715
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     8080
tcp       22
tcp    39287
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    50316
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687
tcp      444
tcp     4321


_raw: Sat Jan 10 02:58:39 PM EST 2026 file_hash=SHA2-256(stdin)= 7bf2cdf2a527bd946dc873d762bd78639dbda9a2ef6cefac8e6325be912e77aa


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1179548 user=pentester fd=3u ip_version=4 dvc_id=3404684 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=46207 pid=517397 user=pentester fd=42u ip_version=4 dvc_id=1216533 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8081 pid=514831 user=pentester fd=37u ip_version=6 dvc_id=1210306 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=44845 pid=514831 user=pentester fd=18u ip_version=6 dvc_id=1207232 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=luftweht-viewer dest_ip=* dest_port=8080 pid=256099 user=pentester fd=6u ip_version=6 dvc_id=377468 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=7u ip_version=6 dvc_id=351468 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=6u ip_version=4 dvc_id=351466 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=socat dest_ip=* dest_port=8000 pid=234221 user=pentester fd=5u ip_version=4 dvc_id=316787 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=10780 transport=TCP


_raw: Sat Jan 10 02:58:39 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9556 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     4444
tcp    46207
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8081
tcp    44845
tcp     8080


_raw:
Proto   Port
udp    45033
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8081
tcp    36179
tcp     8889
tcp    32919
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:57:52 PM EST 2026 app=nc dest_ip=* dest_port=9999 pid=1119066 user=pentester fd=3u ip_version=4 dvc_id=1865212 transport=TCP


_raw: Sat Jan 10 02:57:52 PM EST 2026 app=nc dest_ip=* dest_port=4445 pid=1095016 user=pentester fd=3u ip_version=4 dvc_id=1821939 transport=TCP


_raw: Sat Jan 10 02:57:52 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=10605 transport=TCP


_raw: Sat Jan 10 02:57:52 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6028 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     9999
tcp     4445
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=36101 pid=1124640 user=pentester fd=39u ip_version=4 dvc_id=6018552 transport=TCP


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1114417 user=pentester fd=37u ip_version=6 dvc_id=5988300 transport=TCP


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39079 pid=1114417 user=pentester fd=18u ip_version=6 dvc_id=5987256 transport=TCP


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45173 pid=1068259 user=pentester fd=119u ip_version=4 dvc_id=6777276 transport=UDP


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39189 pid=1068259 user=pentester fd=95u ip_version=4 dvc_id=6777278 transport=UDP


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=403059 user=root fd=13u ip_version=4 dvc_id=1090059 transport=TCP


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11649 transport=TCP


_raw: Sat Jan 10 02:57:46 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5052 transport=UDP


_raw: Sat Jan 10 02:57:35 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=377729 user=root fd=13u ip_version=4 dvc_id=632149 transport=TCP


_raw: Sat Jan 10 02:57:35 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10675 transport=TCP


_raw: Sat Jan 10 02:57:35 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9493 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     8000
tcp    38287
tcp     3350
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp       53
tcp     8889
tcp     8080
tcp     7687
tcp     7474
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    48776
udp       68
udp      546
tcp     8889
tcp    42409
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    44213
tcp     8889
tcp     8080
tcp     3389
tcp    38959
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw:
Proto   Port
udp    37700
udp    34635
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    46527
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    36911
tcp     4444
tcp     9001
tcp    15372
tcp     3389
tcp     3350


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1179548 user=pentester fd=3u ip_version=4 dvc_id=3404684 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=46207 pid=517397 user=pentester fd=42u ip_version=4 dvc_id=1216533 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8081 pid=514831 user=pentester fd=37u ip_version=6 dvc_id=1210306 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=44845 pid=514831 user=pentester fd=18u ip_version=6 dvc_id=1207232 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=393238 user=root fd=13u ip_version=4 dvc_id=820618 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=luftweht-viewer dest_ip=* dest_port=8080 pid=256099 user=pentester fd=6u ip_version=6 dvc_id=377468 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=7u ip_version=6 dvc_id=351468 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=6u ip_version=4 dvc_id=351466 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=socat dest_ip=* dest_port=8000 pid=234221 user=pentester fd=5u ip_version=4 dvc_id=316787 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=10780 transport=TCP


_raw: Sat Jan 10 02:56:19 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9556 transport=UDP


_raw: Sat Jan 10 02:56:17 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=422440 user=root fd=13u ip_version=4 dvc_id=568756 transport=TCP


_raw: Sat Jan 10 02:56:17 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5186 user=xrdp fd=11u ip_version=6 dvc_id=16086 transport=TCP


_raw: Sat Jan 10 02:56:17 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3883 user=root fd=7u ip_version=6 dvc_id=17477 transport=TCP


_raw: Sat Jan 10 02:56:17 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3883 user=root fd=6u ip_version=4 dvc_id=17469 transport=TCP


_raw: Sat Jan 10 02:56:17 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=661 user=dhcpcd fd=3u ip_version=4 dvc_id=7060 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     4444
tcp     8889
tcp    46207
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8081
tcp    44845
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp     8000
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    33126
udp      546
tcp    37581
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp      546
tcp     5555
tcp     4444
tcp     4444
tcp       80
tcp     8889
tcp     6666
tcp     3350
tcp     8080
tcp     3389
tcp    33459


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1091008 user=pentester fd=37u ip_version=6 dvc_id=3005663 transport=TCP


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34005 pid=1091008 user=pentester fd=18u ip_version=6 dvc_id=3003306 transport=TCP


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=389619 user=root fd=13u ip_version=4 dvc_id=785653 transport=TCP


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354352 user=root fd=4u ip_version=6 dvc_id=671616 transport=TCP


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354345 user=root fd=4u ip_version=4 dvc_id=671610 transport=TCP


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=45447 pid=352062 user=root fd=7u ip_version=4 dvc_id=664561 transport=TCP


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12365 transport=TCP


_raw: Sat Jan 10 02:55:59 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=999 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp    34005
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    45073
tcp     8889
tcp     3350
tcp    40965
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:55:44 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=391771 user=root fd=13u ip_version=4 dvc_id=904692 transport=TCP


_raw: Sat Jan 10 02:55:44 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10825 transport=TCP


_raw: Sat Jan 10 02:55:44 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5060 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Sat Jan 10 02:55:34 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=369032 user=root fd=13u ip_version=4 dvc_id=556398 transport=TCP


_raw: Sat Jan 10 02:55:34 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34409 pid=253416 user=root fd=10u ip_version=4 dvc_id=342533 transport=TCP


_raw: Sat Jan 10 02:55:34 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=9058 transport=TCP


_raw: Sat Jan 10 02:55:34 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8416 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1208333 user=pentester fd=37u ip_version=6 dvc_id=2385530 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=40451 pid=1208333 user=pentester fd=18u ip_version=6 dvc_id=2386708 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=388400 user=root fd=13u ip_version=4 dvc_id=639598 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=250825 user=root fd=282u ip_version=6 dvc_id=370230 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=250825 user=root fd=281u ip_version=6 dvc_id=369192 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=250631 user=postgres fd=7u ip_version=4 dvc_id=370784 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234321 user=root fd=4u ip_version=6 dvc_id=311018 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234315 user=root fd=4u ip_version=4 dvc_id=311009 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46469 pid=232947 user=root fd=9u ip_version=4 dvc_id=307670 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11603 transport=TCP


_raw: Sat Jan 10 02:55:32 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=5984 transport=UDP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=477150 user=root fd=13u ip_version=4 dvc_id=987445 transport=TCP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=python3 dest_ip=* dest_port=999 pid=287250 user=pentester fd=3u ip_version=4 dvc_id=481081 transport=TCP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8000 pid=244152 user=root fd=4u ip_version=4 dvc_id=360555 transport=TCP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=caddy dest_ip=* dest_port=1337 pid=243869 user=root fd=7u ip_version=6 dvc_id=359617 transport=TCP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=caddy dest_ip=127.0.0.1 dest_port=2019 pid=243869 user=root fd=4u ip_version=4 dvc_id=359612 transport=TCP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=44719 pid=237321 user=root fd=8u ip_version=4 dvc_id=318416 transport=TCP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10081 transport=TCP


_raw: Sat Jan 10 02:55:31 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8446 transport=UDP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=499220 user=pentester fd=9u ip_version=4 dvc_id=1048003 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=499220 user=pentester fd=8u ip_version=4 dvc_id=1050130 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=499220 user=pentester fd=7u ip_version=4 dvc_id=1048002 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=499220 user=pentester fd=6u ip_version=4 dvc_id=1050836 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=499220 user=pentester fd=5u ip_version=4 dvc_id=1050129 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=499220 user=pentester fd=4u ip_version=4 dvc_id=1048001 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=499220 user=pentester fd=3u ip_version=4 dvc_id=1048857 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=387292 user=root fd=13u ip_version=4 dvc_id=729063 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58259 pid=238617 user=pentester fd=111u ip_version=4 dvc_id=2221173 transport=UDP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9566 transport=TCP


_raw: Sat Jan 10 02:55:30 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=848 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:55:29 PM EST 2026 app=python3 dest_ip=* dest_port=5000 pid=1065801 user=pentester fd=3u ip_version=4 dvc_id=2321465 transport=TCP


_raw: Sat Jan 10 02:55:29 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=385748 user=root fd=13u ip_version=4 dvc_id=760214 transport=TCP


_raw: Sat Jan 10 02:55:29 PM EST 2026 app=conmon dest_ip=* dest_port=3080 pid=365257 user=root fd=5u ip_version=4 dvc_id=698656 transport=TCP


_raw: Sat Jan 10 02:55:29 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=12u ip_version=4 dvc_id=572135 transport=TCP


_raw: Sat Jan 10 02:55:29 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=11u ip_version=4 dvc_id=572134 transport=UDP


_raw: Sat Jan 10 02:55:29 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10738 transport=TCP


_raw: Sat Jan 10 02:55:29 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9382 transport=UDP


_raw:
Proto   Port
udp    58259
udp       68
udp      546
tcp     5985
tcp     5986
tcp     9389
tcp       80
tcp      135
tcp      445
tcp     8889
tcp     6666
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     5000
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8080
tcp     8889
tcp     5555
tcp     3389
tcp    11601
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    42099
tcp    42065
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       80
tcp     8888
tcp     1883
tcp     9392
tcp     5432
tcp     1883
tcp     5432
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    42765
tcp     8889
tcp     3389
tcp    42321
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:54:54 PM EST 2026 file_hash=SHA2-256(stdin)= 67a4fdfc32a1b90fa4f8c47a0f7db500fd7c56a50260d314efc0cab6a66af4ad


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=1729834 user=root fd=11u ip_version=4 dvc_id=4531443 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=1729834 user=root fd=10u ip_version=4 dvc_id=4535112 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=1729834 user=root fd=9u ip_version=4 dvc_id=4535111 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=9090 pid=1729834 user=root fd=8u ip_version=4 dvc_id=4535114 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=1729834 user=root fd=7u ip_version=4 dvc_id=4531442 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=1729834 user=root fd=6u ip_version=4 dvc_id=4535110 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=1729834 user=root fd=5u ip_version=4 dvc_id=4530866 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1729834 user=root fd=4u ip_version=4 dvc_id=4535433 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=1080 pid=1729834 user=root fd=3u ip_version=4 dvc_id=4530865 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33334 pid=1504425 user=pentester fd=87u ip_version=4 dvc_id=4480062 transport=UDP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=424789 user=root fd=13u ip_version=4 dvc_id=819074 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=268301 user=root fd=4u ip_version=4 dvc_id=390041 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=267643 user=root fd=4u ip_version=4 dvc_id=390363 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=267635 user=root fd=4u ip_version=4 dvc_id=390359 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46167 pid=239046 user=root fd=7u ip_version=4 dvc_id=323333 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11308 transport=TCP


_raw: Sat Jan 10 02:54:54 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7652 transport=UDP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1002995 user=pentester fd=37u ip_version=6 dvc_id=2977394 transport=TCP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=44947 pid=1002995 user=pentester fd=18u ip_version=6 dvc_id=2977965 transport=TCP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59969 pid=1000297 user=pentester fd=127u ip_version=4 dvc_id=4020045 transport=UDP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=534770 user=pentester fd=7u ip_version=4 dvc_id=2195752 transport=TCP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=387707 user=root fd=13u ip_version=4 dvc_id=1338785 transport=TCP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34391 pid=236134 user=root fd=9u ip_version=4 dvc_id=317963 transport=TCP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=12334 transport=TCP


_raw: Sat Jan 10 02:54:53 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=9264 transport=UDP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=422336 user=root fd=13u ip_version=4 dvc_id=567992 transport=TCP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5177 user=xrdp fd=11u ip_version=6 dvc_id=20540 transport=TCP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=7u ip_version=6 dvc_id=15709 transport=TCP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=6u ip_version=4 dvc_id=15707 transport=TCP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7057 transport=UDP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=374357 user=root fd=13u ip_version=4 dvc_id=610489 transport=TCP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=9991 transport=TCP


_raw: Sat Jan 10 02:54:46 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=431858 user=pentester fd=37u ip_version=6 dvc_id=709595 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=33143 pid=431858 user=pentester fd=18u ip_version=6 dvc_id=709500 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=385910 user=root fd=13u ip_version=4 dvc_id=624450 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293834 user=root fd=4u ip_version=6 dvc_id=458419 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293827 user=root fd=4u ip_version=4 dvc_id=458411 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293244 user=root fd=4u ip_version=6 dvc_id=458003 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293237 user=root fd=4u ip_version=4 dvc_id=451580 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293229 user=root fd=4u ip_version=6 dvc_id=451576 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293219 user=root fd=4u ip_version=4 dvc_id=451569 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41727 pid=248513 user=root fd=9u ip_version=4 dvc_id=345512 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=slorpin dest_ip=* dest_port=80 pid=239584 user=pentester fd=6u ip_version=6 dvc_id=326050 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=10640 transport=TCP


_raw: Sat Jan 10 02:54:36 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9426 transport=UDP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1208738 user=pentester fd=37u ip_version=6 dvc_id=2476941 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=38477 pid=1208738 user=pentester fd=18u ip_version=6 dvc_id=2477658 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=371687 user=root fd=13u ip_version=4 dvc_id=928854 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=firefox-esr dest_ip=* dest_port=32947 pid=254035 user=pentester fd=190u ip_version=4 dvc_id=2528426 transport=UDP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35589 pid=254035 user=pentester fd=189u ip_version=4 dvc_id=2528424 transport=UDP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47987 pid=254035 user=pentester fd=188u ip_version=4 dvc_id=2528411 transport=UDP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37666 pid=254035 user=pentester fd=168u ip_version=4 dvc_id=2528413 transport=UDP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34017 pid=254035 user=pentester fd=85u ip_version=4 dvc_id=2528404 transport=UDP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12470 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=6849 transport=UDP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=33419 pid=1011426 user=pentester fd=5u ip_version=4 dvc_id=3012534 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=44941 pid=1011426 user=pentester fd=4u ip_version=4 dvc_id=3012533 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=python3 dest_ip=* dest_port=8445 pid=1011426 user=pentester fd=3u ip_version=4 dvc_id=3012532 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=python3 dest_ip=* dest_port=5000 pid=990660 user=pentester fd=3u ip_version=4 dvc_id=2967161 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=373833 user=root fd=13u ip_version=4 dvc_id=1712803 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=10739 transport=TCP


_raw: Sat Jan 10 02:54:34 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=8244 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8445
tcp     5000
tcp     8889
tcp    33419
tcp    44941
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=421761 user=root fd=13u ip_version=4 dvc_id=568054 transport=TCP


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5163 user=xrdp fd=11u ip_version=6 dvc_id=19513 transport=TCP


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=7u ip_version=6 dvc_id=14958 transport=TCP


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=6u ip_version=4 dvc_id=14956 transport=TCP


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=663 user=dhcpcd fd=3u ip_version=4 dvc_id=9433 transport=UDP


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=389789 user=root fd=13u ip_version=4 dvc_id=721566 transport=TCP


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=11824 transport=TCP


_raw: Sat Jan 10 02:54:32 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5048 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:54:31 PM EST 2026 app=nc dest_ip=* dest_port=9999 pid=1119066 user=pentester fd=3u ip_version=4 dvc_id=1865212 transport=TCP


_raw: Sat Jan 10 02:54:31 PM EST 2026 app=nc dest_ip=* dest_port=4445 pid=1095016 user=pentester fd=3u ip_version=4 dvc_id=1821939 transport=TCP


_raw: Sat Jan 10 02:54:31 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=369928 user=root fd=13u ip_version=4 dvc_id=547740 transport=TCP


_raw: Sat Jan 10 02:54:31 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=10605 transport=TCP


_raw: Sat Jan 10 02:54:31 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6028 transport=UDP


_raw:
Proto   Port
udp     5353
udp     5353
udp     7359
udp       68
udp     7359
udp      546
tcp     8889
tcp       22
tcp    38561
tcp     8096
tcp     8080
tcp       22
tcp     3350
tcp     3389
tcp     8096


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     9999
tcp     4445
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:54:26 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=374222 user=root fd=13u ip_version=4 dvc_id=577148 transport=TCP


_raw: Sat Jan 10 02:54:26 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9888 transport=TCP


_raw: Sat Jan 10 02:54:26 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8351 transport=UDP


_raw: Sat Jan 10 02:54:24 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=422341 user=root fd=13u ip_version=4 dvc_id=566166 transport=TCP


_raw: Sat Jan 10 02:54:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5203 user=xrdp fd=11u ip_version=6 dvc_id=20481 transport=TCP


_raw: Sat Jan 10 02:54:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=7u ip_version=6 dvc_id=12897 transport=TCP


_raw: Sat Jan 10 02:54:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=6u ip_version=4 dvc_id=12895 transport=TCP


_raw: Sat Jan 10 02:54:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=665 user=dhcpcd fd=3u ip_version=4 dvc_id=9431 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Jan 10 02:54:19 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43671 pid=982892 user=root fd=7u ip_version=4 dvc_id=1552207 transport=TCP


_raw: Sat Jan 10 02:54:19 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=365612 user=root fd=13u ip_version=4 dvc_id=527648 transport=TCP


_raw: Sat Jan 10 02:54:19 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11675 transport=TCP


_raw: Sat Jan 10 02:54:19 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7094 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43671
tcp     3389
tcp     3350


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=442446 user=root fd=13u ip_version=4 dvc_id=1182979 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=7u ip_version=6 dvc_id=411401 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=6u ip_version=4 dvc_id=411399 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=243989 user=root fd=4u ip_version=4 dvc_id=378478 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243349 user=root fd=4u ip_version=4 dvc_id=377368 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243342 user=root fd=4u ip_version=4 dvc_id=377947 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39943 pid=237975 user=root fd=7u ip_version=4 dvc_id=340760 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35021 pid=230428 user=pentester fd=181u ip_version=4 dvc_id=6028565 transport=UDP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46513 pid=230428 user=pentester fd=170u ip_version=4 dvc_id=6029769 transport=UDP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40232 pid=230428 user=pentester fd=169u ip_version=4 dvc_id=6028575 transport=UDP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10726 transport=TCP


_raw: Sat Jan 10 02:54:17 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7951 transport=UDP


_raw:
Proto   Port
udp    46424
udp       68
udp      546
tcp     8889
tcp    42423
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     5555
tcp     8889
tcp     8000
tcp     3350
tcp    36523
tcp     8080
tcp     3389


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=java dest_ip=* dest_port=7474 pid=2138255 user=root fd=282u ip_version=6 dvc_id=3463549 transport=TCP


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=java dest_ip=* dest_port=7687 pid=2138255 user=root fd=281u ip_version=6 dvc_id=3463540 transport=TCP


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=378125 user=root fd=13u ip_version=4 dvc_id=671657 transport=TCP


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41739 pid=245803 user=root fd=9u ip_version=4 dvc_id=334765 transport=TCP


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=7u ip_version=6 dvc_id=311986 transport=TCP


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=6u ip_version=4 dvc_id=311984 transport=TCP


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10697 transport=TCP


_raw: Sat Jan 10 02:54:05 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7973 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp     7687


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1152733 user=pentester fd=37u ip_version=6 dvc_id=2094201 transport=TCP


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39287 pid=1152733 user=pentester fd=23u ip_version=6 dvc_id=2093527 transport=TCP


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58541 pid=1151668 user=pentester fd=81u ip_version=4 dvc_id=2332725 transport=UDP


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=379381 user=root fd=13u ip_version=4 dvc_id=594302 transport=TCP


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=7u ip_version=6 dvc_id=310487 transport=TCP


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=6u ip_version=4 dvc_id=310485 transport=TCP


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=9637 transport=TCP


_raw: Sat Jan 10 02:54:03 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8557 transport=UDP


_raw:
Proto   Port
udp       68
udp    58541
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     8080
tcp       22
tcp    39287
tcp     3350


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=1532848 user=pentester fd=9u ip_version=4 dvc_id=3316296 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=1532848 user=pentester fd=8u ip_version=4 dvc_id=3317980 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=1532848 user=pentester fd=7u ip_version=4 dvc_id=3317979 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=1532848 user=pentester fd=6u ip_version=4 dvc_id=3317085 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=1532848 user=pentester fd=5u ip_version=4 dvc_id=3315386 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1532848 user=pentester fd=4u ip_version=4 dvc_id=3317978 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=1532848 user=pentester fd=3u ip_version=4 dvc_id=3316295 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=432113 user=root fd=13u ip_version=4 dvc_id=825741 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=248439 user=root fd=4u ip_version=4 dvc_id=356202 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=247692 user=root fd=4u ip_version=4 dvc_id=356429 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=247685 user=root fd=4u ip_version=4 dvc_id=356425 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39371 pid=232438 user=root fd=9u ip_version=4 dvc_id=312835 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60624 pid=229246 user=pentester fd=18u ip_version=4 dvc_id=3502921 transport=UDP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10964 transport=TCP


_raw: Sat Jan 10 02:53:55 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=644 user=dhcpcd fd=3u ip_version=4 dvc_id=8386 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    50316
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:53:47 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41069 pid=1209483 user=root fd=10u ip_version=4 dvc_id=7425184 transport=TCP


_raw: Sat Jan 10 02:53:47 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1185389 user=pentester fd=37u ip_version=6 dvc_id=7223703 transport=TCP


_raw: Sat Jan 10 02:53:47 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=38993 pid=1185389 user=pentester fd=18u ip_version=6 dvc_id=7223397 transport=TCP


_raw: Sat Jan 10 02:53:47 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=386410 user=root fd=13u ip_version=4 dvc_id=1141451 transport=TCP


_raw: Sat Jan 10 02:53:47 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12356 transport=TCP


_raw: Sat Jan 10 02:53:47 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7783 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    41069
tcp     3350
tcp     3389
tcp     8080
tcp    38993


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1247803 user=pentester fd=3u ip_version=4 dvc_id=17270621 transport=TCP


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=adaptixserver dest_ip=* dest_port=444 pid=538411 user=pentester fd=10u ip_version=6 dvc_id=15945713 transport=TCP


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=adaptixserver dest_ip=* dest_port=4321 pid=538411 user=pentester fd=7u ip_version=6 dvc_id=15909286 transport=TCP


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=384109 user=root fd=13u ip_version=4 dvc_id=15567955 transport=TCP


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=376541 user=root fd=282u ip_version=6 dvc_id=15536417 transport=TCP


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=376541 user=root fd=281u ip_version=6 dvc_id=15536411 transport=TCP


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=10933 transport=TCP


_raw: Sat Jan 10 02:53:43 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7619 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687
tcp      444
tcp     4321


_raw: Sat Jan 10 02:53:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1287632 user=pentester fd=37u ip_version=6 dvc_id=8816003 transport=TCP


_raw: Sat Jan 10 02:53:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=42423 pid=1287632 user=pentester fd=18u ip_version=6 dvc_id=8808713 transport=TCP


_raw: Sat Jan 10 02:53:39 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46424 pid=1161837 user=pentester fd=224u ip_version=4 dvc_id=8079023 transport=UDP


_raw: Sat Jan 10 02:53:39 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=383107 user=root fd=13u ip_version=4 dvc_id=812179 transport=TCP


_raw: Sat Jan 10 02:53:39 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=879 user=xrdp fd=11u ip_version=6 dvc_id=9927 transport=TCP


_raw: Sat Jan 10 02:53:39 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=7636 transport=UDP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=33863 pid=498334 user=pentester fd=40u ip_version=4 dvc_id=1819137 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=493417 user=pentester fd=37u ip_version=6 dvc_id=1800350 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41585 pid=493417 user=pentester fd=18u ip_version=6 dvc_id=1799161 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=444619 user=root fd=13u ip_version=4 dvc_id=1632907 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8888 pid=237945 user=root fd=7u ip_version=4 dvc_id=328219 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=237382 user=root fd=7u ip_version=4 dvc_id=327255 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=237359 user=root fd=7u ip_version=4 dvc_id=327745 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=884 user=xrdp fd=11u ip_version=6 dvc_id=10649 transport=TCP


_raw: Sat Jan 10 02:53:34 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=8623 transport=UDP


_raw: Sat Jan 10 02:53:33 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45033 pid=408950 user=pentester fd=62u ip_version=4 dvc_id=1131185 transport=UDP


_raw: Sat Jan 10 02:53:33 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=262225 user=root fd=13u ip_version=4 dvc_id=341144 transport=TCP


_raw: Sat Jan 10 02:53:33 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11485 transport=TCP


_raw: Sat Jan 10 02:53:33 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7383 transport=UDP


_raw:
Proto   Port
udp    45033
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1278876 user=pentester fd=3u ip_version=4 dvc_id=2569619 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1273036 user=pentester fd=37u ip_version=6 dvc_id=2530871 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=43615 pid=1273036 user=pentester fd=18u ip_version=6 dvc_id=2530819 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45245 pid=1056193 user=pentester fd=182u ip_version=4 dvc_id=2597369 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33434 pid=1056193 user=pentester fd=176u ip_version=4 dvc_id=2597367 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58522 pid=1056193 user=pentester fd=167u ip_version=4 dvc_id=2597351 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55485 pid=1056193 user=pentester fd=164u ip_version=4 dvc_id=2586667 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57303 pid=1056193 user=pentester fd=159u ip_version=4 dvc_id=2597341 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43971 pid=1056193 user=pentester fd=144u ip_version=4 dvc_id=2597330 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60451 pid=1056193 user=pentester fd=142u ip_version=4 dvc_id=2595378 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41297 pid=1056193 user=pentester fd=139u ip_version=4 dvc_id=2597208 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50828 pid=1056193 user=pentester fd=137u ip_version=4 dvc_id=2595374 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59275 pid=1056193 user=pentester fd=89u ip_version=4 dvc_id=2594187 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39973 pid=1056193 user=pentester fd=48u ip_version=4 dvc_id=2597270 transport=UDP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=382814 user=root fd=13u ip_version=4 dvc_id=666198 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346377 user=root fd=4u ip_version=6 dvc_id=547689 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346371 user=root fd=4u ip_version=4 dvc_id=546665 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345824 user=root fd=4u ip_version=6 dvc_id=545158 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345817 user=root fd=4u ip_version=4 dvc_id=543644 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345809 user=root fd=4u ip_version=6 dvc_id=543640 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345801 user=root fd=4u ip_version=4 dvc_id=546974 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39035 pid=345056 user=root fd=9u ip_version=4 dvc_id=542090 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=8833 transport=TCP


_raw: Sat Jan 10 02:53:31 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7900 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8081
tcp    36179
tcp     8889
tcp    32919
tcp     3389
tcp     3350


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=398079 user=root fd=13u ip_version=4 dvc_id=689034 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=323237 user=_bloodhound fd=8u ip_version=4 dvc_id=545260 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=323237 user=_bloodhound fd=6u ip_version=6 dvc_id=545881 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=java dest_ip=* dest_port=7474 pid=322395 user=root fd=282u ip_version=6 dvc_id=542173 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=java dest_ip=* dest_port=7687 pid=322395 user=root fd=281u ip_version=6 dvc_id=541385 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=318453 user=postgres fd=7u ip_version=4 dvc_id=531349 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242178 user=root fd=4u ip_version=6 dvc_id=336895 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242162 user=root fd=4u ip_version=4 dvc_id=337706 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=36919 pid=239314 user=root fd=8u ip_version=4 dvc_id=327075 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=7u ip_version=6 dvc_id=318034 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=6u ip_version=4 dvc_id=318026 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=860 user=xrdp fd=11u ip_version=6 dvc_id=10034 transport=TCP


_raw: Sat Jan 10 02:53:12 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7596 transport=UDP


_raw: Sat Jan 10 02:53:00 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=394134 user=root fd=13u ip_version=4 dvc_id=993173 transport=TCP


_raw: Sat Jan 10 02:53:00 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=345661 user=root fd=7u ip_version=4 dvc_id=781680 transport=TCP


_raw: Sat Jan 10 02:53:00 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43007 pid=242932 user=root fd=10u ip_version=4 dvc_id=354166 transport=TCP


_raw: Sat Jan 10 02:53:00 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44490 pid=228769 user=pentester fd=110u ip_version=4 dvc_id=4409053 transport=UDP


_raw: Sat Jan 10 02:53:00 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11654 transport=TCP


_raw: Sat Jan 10 02:53:00 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8573 transport=UDP


_raw: Sat Jan 10 02:52:59 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=384717 user=root fd=13u ip_version=4 dvc_id=753913 transport=TCP


_raw: Sat Jan 10 02:52:59 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11538 transport=TCP


_raw: Sat Jan 10 02:52:59 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9411 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 02:52:34 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=1288994 user=pentester fd=3u ip_version=4 dvc_id=7778669 transport=TCP


_raw: Sat Jan 10 02:52:34 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=1260125 user=pentester fd=3u ip_version=4 dvc_id=7674588 transport=TCP


_raw: Sat Jan 10 02:52:34 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1206386 user=pentester fd=37u ip_version=6 dvc_id=7453039 transport=TCP