_raw: Fri Jan  9 03:19:30 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51357 pid=229938 user=pentester fd=172u ip_version=4 dvc_id=1104676 transport=UDP


_raw: Fri Jan  9 03:19:30 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59793 pid=229938 user=pentester fd=171u ip_version=4 dvc_id=1105598 transport=UDP


_raw: Fri Jan  9 03:19:30 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60538 pid=229938 user=pentester fd=159u ip_version=4 dvc_id=1104670 transport=UDP


_raw: Fri Jan  9 03:19:30 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52604 pid=229938 user=pentester fd=81u ip_version=4 dvc_id=1106148 transport=UDP


_raw: Fri Jan  9 03:19:30 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=10780 transport=TCP


_raw: Fri Jan  9 03:19:30 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9556 transport=UDP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=493364 user=_bloodhound fd=8u ip_version=4 dvc_id=1311234 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=493364 user=_bloodhound fd=6u ip_version=6 dvc_id=1309611 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=492989 user=root fd=615u ip_version=6 dvc_id=1311195 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=492989 user=root fd=614u ip_version=6 dvc_id=1311179 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=423050 user=root fd=13u ip_version=4 dvc_id=993605 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=node dest_ip=* dest_port=3001 pid=279781 user=pentester fd=26u ip_version=6 dvc_id=479418 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51719 pid=244705 user=pentester fd=159u ip_version=4 dvc_id=1333947 transport=UDP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=node dest_ip=* dest_port=1337 pid=244572 user=planka fd=26u ip_version=6 dvc_id=326092 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=235049 user=postgres fd=7u ip_version=4 dvc_id=310915 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=12335 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8644 transport=UDP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=390322 user=root fd=13u ip_version=4 dvc_id=916134 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246424 user=root fd=7u ip_version=6 dvc_id=355109 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246424 user=root fd=6u ip_version=4 dvc_id=355107 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47462 pid=230084 user=pentester fd=169u ip_version=4 dvc_id=1236264 transport=UDP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=11472 transport=TCP


_raw: Fri Jan  9 03:19:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7760 transport=UDP


_raw:
Proto   Port
udp    47462
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw: Fri Jan  9 03:19:15 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=369032 user=root fd=13u ip_version=4 dvc_id=556398 transport=TCP


_raw: Fri Jan  9 03:19:15 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34409 pid=253416 user=root fd=10u ip_version=4 dvc_id=342533 transport=TCP


_raw: Fri Jan  9 03:19:15 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=9058 transport=TCP


_raw: Fri Jan  9 03:19:15 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8416 transport=UDP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=477150 user=root fd=13u ip_version=4 dvc_id=987445 transport=TCP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=python3 dest_ip=* dest_port=999 pid=287250 user=pentester fd=3u ip_version=4 dvc_id=481081 transport=TCP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8000 pid=244152 user=root fd=4u ip_version=4 dvc_id=360555 transport=TCP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=caddy dest_ip=* dest_port=1337 pid=243869 user=root fd=7u ip_version=6 dvc_id=359617 transport=TCP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=caddy dest_ip=127.0.0.1 dest_port=2019 pid=243869 user=root fd=4u ip_version=4 dvc_id=359612 transport=TCP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=44719 pid=237321 user=root fd=8u ip_version=4 dvc_id=318416 transport=TCP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10081 transport=TCP


_raw: Fri Jan  9 03:19:14 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8446 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw: Fri Jan  9 03:19:04 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=381675 user=root fd=13u ip_version=4 dvc_id=713883 transport=TCP


_raw: Fri Jan  9 03:19:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48323 pid=229884 user=pentester fd=269u ip_version=4 dvc_id=489218 transport=UDP


_raw: Fri Jan  9 03:19:04 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=9794 transport=TCP


_raw: Fri Jan  9 03:19:04 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5935 transport=UDP


_raw:
Proto   Port
udp    48323
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    56315
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    33626
udp      546
tcp     8889
tcp    45631
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw: Fri Jan  9 03:18:36 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=422336 user=root fd=13u ip_version=4 dvc_id=567992 transport=TCP


_raw: Fri Jan  9 03:18:36 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5177 user=xrdp fd=11u ip_version=6 dvc_id=20540 transport=TCP


_raw: Fri Jan  9 03:18:36 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=7u ip_version=6 dvc_id=15709 transport=TCP


_raw: Fri Jan  9 03:18:36 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=6u ip_version=4 dvc_id=15707 transport=TCP


_raw: Fri Jan  9 03:18:36 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7057 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:18:22 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=378125 user=root fd=13u ip_version=4 dvc_id=671657 transport=TCP


_raw: Fri Jan  9 03:18:22 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41739 pid=245803 user=root fd=9u ip_version=4 dvc_id=334765 transport=TCP


_raw: Fri Jan  9 03:18:22 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=7u ip_version=6 dvc_id=311986 transport=TCP


_raw: Fri Jan  9 03:18:22 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=6u ip_version=4 dvc_id=311984 transport=TCP


_raw: Fri Jan  9 03:18:22 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10697 transport=TCP


_raw: Fri Jan  9 03:18:22 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7973 transport=UDP


_raw:
Proto   Port
udp    47710
udp       68
udp    58989
udp    55010
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:18:21 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=387292 user=root fd=13u ip_version=4 dvc_id=729063 transport=TCP


_raw: Fri Jan  9 03:18:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46846 pid=238617 user=pentester fd=195u ip_version=4 dvc_id=828147 transport=UDP


_raw: Fri Jan  9 03:18:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9566 transport=TCP


_raw: Fri Jan  9 03:18:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=848 transport=UDP


_raw: Fri Jan  9 03:18:20 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=379381 user=root fd=13u ip_version=4 dvc_id=594302 transport=TCP


_raw: Fri Jan  9 03:18:20 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=7u ip_version=6 dvc_id=310487 transport=TCP


_raw: Fri Jan  9 03:18:20 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=6u ip_version=4 dvc_id=310485 transport=TCP


_raw: Fri Jan  9 03:18:20 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=9637 transport=TCP


_raw: Fri Jan  9 03:18:20 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8557 transport=UDP


_raw:
Proto   Port
udp    46846
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Fri Jan  9 03:18:17 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=421761 user=root fd=13u ip_version=4 dvc_id=568054 transport=TCP


_raw: Fri Jan  9 03:18:17 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5163 user=xrdp fd=11u ip_version=6 dvc_id=19513 transport=TCP


_raw: Fri Jan  9 03:18:17 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=7u ip_version=6 dvc_id=14958 transport=TCP


_raw: Fri Jan  9 03:18:17 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=6u ip_version=4 dvc_id=14956 transport=TCP


_raw: Fri Jan  9 03:18:17 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=663 user=dhcpcd fd=3u ip_version=4 dvc_id=9433 transport=UDP


_raw: Fri Jan  9 03:18:16 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=422341 user=root fd=13u ip_version=4 dvc_id=566166 transport=TCP


_raw: Fri Jan  9 03:18:16 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5203 user=xrdp fd=11u ip_version=6 dvc_id=20481 transport=TCP


_raw: Fri Jan  9 03:18:16 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=7u ip_version=6 dvc_id=12897 transport=TCP


_raw: Fri Jan  9 03:18:16 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=6u ip_version=4 dvc_id=12895 transport=TCP


_raw: Fri Jan  9 03:18:16 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=665 user=dhcpcd fd=3u ip_version=4 dvc_id=9431 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Fri Jan  9 03:18:13 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=371687 user=root fd=13u ip_version=4 dvc_id=928854 transport=TCP


_raw: Fri Jan  9 03:18:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12470 transport=TCP


_raw: Fri Jan  9 03:18:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=6849 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:18:08 PM EST 2026 file_hash=SHA2-256(stdin)= d75cabbbcabcb50769d94d511c37cccbb97108d7a130e8e5ebe9e4ff1a5f9322


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=467958 user=pentester fd=9u ip_version=6 dvc_id=852893 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=467958 user=pentester fd=8u ip_version=6 dvc_id=854561 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=467958 user=pentester fd=7u ip_version=6 dvc_id=854560 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=467958 user=pentester fd=6u ip_version=6 dvc_id=852892 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=467958 user=pentester fd=5u ip_version=6 dvc_id=853687 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=467958 user=pentester fd=4u ip_version=6 dvc_id=852891 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=467958 user=pentester fd=3u ip_version=6 dvc_id=855680 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=388400 user=root fd=13u ip_version=4 dvc_id=639598 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=252866 user=_bloodhound fd=8u ip_version=4 dvc_id=377185 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=252866 user=_bloodhound fd=6u ip_version=6 dvc_id=375767 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=250825 user=root fd=282u ip_version=6 dvc_id=370230 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=250825 user=root fd=281u ip_version=6 dvc_id=369192 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=250631 user=postgres fd=7u ip_version=4 dvc_id=370784 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234321 user=root fd=4u ip_version=6 dvc_id=311018 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234315 user=root fd=4u ip_version=4 dvc_id=311009 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46469 pid=232947 user=root fd=9u ip_version=4 dvc_id=307670 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11603 transport=TCP


_raw: Fri Jan  9 03:18:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=5984 transport=UDP


_raw:
Proto   Port
udp    33496
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:17:55 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=385748 user=root fd=13u ip_version=4 dvc_id=760214 transport=TCP


_raw: Fri Jan  9 03:17:55 PM EST 2026 app=conmon dest_ip=* dest_port=3080 pid=365257 user=root fd=5u ip_version=4 dvc_id=698656 transport=TCP


_raw: Fri Jan  9 03:17:55 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=12u ip_version=4 dvc_id=572135 transport=TCP


_raw: Fri Jan  9 03:17:55 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=11u ip_version=4 dvc_id=572134 transport=UDP


_raw: Fri Jan  9 03:17:55 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10738 transport=TCP


_raw: Fri Jan  9 03:17:55 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9382 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:17:51 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=389789 user=root fd=13u ip_version=4 dvc_id=721566 transport=TCP


_raw: Fri Jan  9 03:17:51 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56249 pid=238049 user=pentester fd=81u ip_version=4 dvc_id=927355 transport=UDP


_raw: Fri Jan  9 03:17:51 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=11824 transport=TCP


_raw: Fri Jan  9 03:17:51 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5048 transport=UDP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=424789 user=root fd=13u ip_version=4 dvc_id=819074 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=268301 user=root fd=4u ip_version=4 dvc_id=390041 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=267643 user=root fd=4u ip_version=4 dvc_id=390363 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=267635 user=root fd=4u ip_version=4 dvc_id=390359 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46167 pid=239046 user=root fd=7u ip_version=4 dvc_id=323333 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53677 pid=229409 user=pentester fd=145u ip_version=4 dvc_id=1144673 transport=UDP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11308 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7652 transport=UDP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=34489 pid=434271 user=pentester fd=39u ip_version=4 dvc_id=1534316 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=387707 user=root fd=13u ip_version=4 dvc_id=1338785 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=239763 user=pentester fd=37u ip_version=6 dvc_id=332227 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=43819 pid=239763 user=pentester fd=18u ip_version=6 dvc_id=332159 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34391 pid=236134 user=root fd=9u ip_version=4 dvc_id=317963 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=12334 transport=TCP


_raw: Fri Jan  9 03:17:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=9264 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    53677
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    34489
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:17:48 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=365612 user=root fd=13u ip_version=4 dvc_id=527648 transport=TCP


_raw: Fri Jan  9 03:17:48 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11675 transport=TCP


_raw: Fri Jan  9 03:17:48 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7094 transport=UDP


_raw: Fri Jan  9 03:17:47 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=391771 user=root fd=13u ip_version=4 dvc_id=904692 transport=TCP


_raw: Fri Jan  9 03:17:47 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46425 pid=231564 user=pentester fd=54u ip_version=4 dvc_id=1136907 transport=UDP


_raw: Fri Jan  9 03:17:47 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10825 transport=TCP


_raw: Fri Jan  9 03:17:47 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5060 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    46425
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=nc dest_ip=* dest_port=555 pid=454664 user=pentester fd=3u ip_version=4 dvc_id=1027373 transport=TCP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=377389 user=root fd=13u ip_version=4 dvc_id=741938 transport=TCP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=245957 user=pentester fd=37u ip_version=6 dvc_id=340457 transport=TCP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45883 pid=245957 user=pentester fd=18u ip_version=6 dvc_id=340325 transport=TCP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=chrome dest_ip=224.0.0.251 dest_port=5353 pid=240021 user=pentester fd=216u ip_version=4 dvc_id=799526 transport=UDP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=chrome dest_ip=224.0.0.251 dest_port=5353 pid=239966 user=pentester fd=195u ip_version=4 dvc_id=328460 transport=UDP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=231113 user=pentester fd=194u ip_version=4 dvc_id=307073 transport=UDP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=8912 transport=TCP


_raw: Fri Jan  9 03:17:45 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8211 transport=UDP


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp     5353
udp      546
tcp      555
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    39398
udp       68
udp      546
tcp    52511
tcp    18806
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:17:28 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=384717 user=root fd=13u ip_version=4 dvc_id=753913 transport=TCP


_raw: Fri Jan  9 03:17:28 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58685 pid=246013 user=pentester fd=159u ip_version=4 dvc_id=1037313 transport=UDP


_raw: Fri Jan  9 03:17:28 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33587 pid=246013 user=pentester fd=151u ip_version=4 dvc_id=998515 transport=UDP


_raw: Fri Jan  9 03:17:28 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33822 pid=246013 user=pentester fd=50u ip_version=4 dvc_id=1034764 transport=UDP


_raw: Fri Jan  9 03:17:28 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11538 transport=TCP


_raw: Fri Jan  9 03:17:28 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9411 transport=UDP


_raw:
Proto   Port
udp       68
udp    33587
udp    33822
udp    58685
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=442446 user=root fd=13u ip_version=4 dvc_id=1182979 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=7u ip_version=6 dvc_id=411401 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=6u ip_version=4 dvc_id=411399 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=243989 user=root fd=4u ip_version=4 dvc_id=378478 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243349 user=root fd=4u ip_version=4 dvc_id=377368 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243342 user=root fd=4u ip_version=4 dvc_id=377947 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39943 pid=237975 user=root fd=7u ip_version=4 dvc_id=340760 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10726 transport=TCP


_raw: Fri Jan  9 03:17:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7951 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=398079 user=root fd=13u ip_version=4 dvc_id=689034 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=323237 user=_bloodhound fd=8u ip_version=4 dvc_id=545260 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=323237 user=_bloodhound fd=6u ip_version=6 dvc_id=545881 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=java dest_ip=* dest_port=7474 pid=322395 user=root fd=282u ip_version=6 dvc_id=542173 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=java dest_ip=* dest_port=7687 pid=322395 user=root fd=281u ip_version=6 dvc_id=541385 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=318453 user=postgres fd=7u ip_version=4 dvc_id=531349 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242178 user=root fd=4u ip_version=6 dvc_id=336895 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242162 user=root fd=4u ip_version=4 dvc_id=337706 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=36919 pid=239314 user=root fd=8u ip_version=4 dvc_id=327075 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=7u ip_version=6 dvc_id=318034 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=6u ip_version=4 dvc_id=318026 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48825 pid=230377 user=pentester fd=113u ip_version=4 dvc_id=1622495 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=860 user=xrdp fd=11u ip_version=6 dvc_id=10034 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7596 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=python3 dest_ip=* dest_port=5000 pid=397575 user=pentester fd=3u ip_version=4 dvc_id=835206 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=387840 user=root fd=13u ip_version=4 dvc_id=815067 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53727 pid=260243 user=pentester fd=240u ip_version=4 dvc_id=979548 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53826 pid=260243 user=pentester fd=190u ip_version=4 dvc_id=979546 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42206 pid=260243 user=pentester fd=180u ip_version=4 dvc_id=980194 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42927 pid=260243 user=pentester fd=174u ip_version=4 dvc_id=982291 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46740 pid=260243 user=pentester fd=169u ip_version=4 dvc_id=982360 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=36610 pid=260243 user=pentester fd=167u ip_version=4 dvc_id=976890 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43909 pid=260243 user=pentester fd=159u ip_version=4 dvc_id=976886 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58482 pid=260243 user=pentester fd=152u ip_version=4 dvc_id=976883 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56890 pid=260243 user=pentester fd=142u ip_version=4 dvc_id=976888 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53417 pid=260243 user=pentester fd=141u ip_version=4 dvc_id=982356 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43461 pid=260243 user=pentester fd=104u ip_version=4 dvc_id=982463 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37794 pid=260243 user=pentester fd=103u ip_version=4 dvc_id=983070 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52465 pid=260243 user=pentester fd=87u ip_version=4 dvc_id=982461 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54542 pid=260243 user=pentester fd=86u ip_version=4 dvc_id=977263 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56935 pid=260243 user=pentester fd=79u ip_version=4 dvc_id=982459 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41255 pid=260243 user=pentester fd=75u ip_version=4 dvc_id=976881 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48934 pid=260243 user=pentester fd=50u ip_version=4 dvc_id=976879 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40231 pid=260243 user=pentester fd=33u ip_version=4 dvc_id=980196 transport=UDP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11437 transport=TCP


_raw: Fri Jan  9 03:17:23 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7752 transport=UDP


_raw: Fri Jan  9 03:17:15 PM EST 2026 app=python dest_ip=* dest_port=8000 pid=476581 user=pentester fd=3u ip_version=4 dvc_id=15780086 transport=TCP


_raw: Fri Jan  9 03:17:15 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=384109 user=root fd=13u ip_version=4 dvc_id=15567955 transport=TCP


_raw: Fri Jan  9 03:17:15 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=376541 user=root fd=282u ip_version=6 dvc_id=15536417 transport=TCP


_raw: Fri Jan  9 03:17:15 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=376541 user=root fd=281u ip_version=6 dvc_id=15536411 transport=TCP


_raw: Fri Jan  9 03:17:15 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=10933 transport=TCP


_raw: Fri Jan  9 03:17:15 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7619 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8000
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=431858 user=pentester fd=37u ip_version=6 dvc_id=709595 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=33143 pid=431858 user=pentester fd=18u ip_version=6 dvc_id=709500 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=385910 user=root fd=13u ip_version=4 dvc_id=624450 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293834 user=root fd=4u ip_version=6 dvc_id=458419 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293827 user=root fd=4u ip_version=4 dvc_id=458411 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293244 user=root fd=4u ip_version=6 dvc_id=458003 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293237 user=root fd=4u ip_version=4 dvc_id=451580 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293229 user=root fd=4u ip_version=6 dvc_id=451576 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293219 user=root fd=4u ip_version=4 dvc_id=451569 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41727 pid=248513 user=root fd=9u ip_version=4 dvc_id=345512 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=slorpin dest_ip=* dest_port=80 pid=239584 user=pentester fd=6u ip_version=6 dvc_id=326050 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=10640 transport=TCP


_raw: Fri Jan  9 03:17:06 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9426 transport=UDP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=435571 user=pentester fd=3u ip_version=4 dvc_id=1282010 transport=TCP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=380415 user=root fd=13u ip_version=4 dvc_id=950862 transport=TCP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=code dest_ip=127.0.0.1 dest_port=36547 pid=273656 user=pentester fd=58u ip_version=4 dvc_id=935359 transport=TCP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=code dest_ip=127.0.0.1 dest_port=44687 pid=273656 user=pentester fd=52u ip_version=4 dvc_id=928969 transport=TCP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=code dest_ip=127.0.0.1 dest_port=21585 pid=273656 user=pentester fd=50u ip_version=4 dvc_id=927355 transport=TCP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50657 pid=245190 user=pentester fd=336u ip_version=4 dvc_id=913134 transport=UDP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11499 transport=TCP


_raw: Fri Jan  9 03:17:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7573 transport=UDP


_raw:
Proto   Port
udp     5353
udp    58722
udp    52156
udp       68
udp      546
tcp     1337
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    49878
udp    37920
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:16:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37920 pid=457874 user=pentester fd=148u ip_version=4 dvc_id=2070350 transport=UDP


_raw: Fri Jan  9 03:16:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49878 pid=457874 user=pentester fd=76u ip_version=4 dvc_id=2066368 transport=UDP


_raw: Fri Jan  9 03:16:55 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=373833 user=root fd=13u ip_version=4 dvc_id=1712803 transport=TCP


_raw: Fri Jan  9 03:16:55 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=10739 transport=TCP


_raw: Fri Jan  9 03:16:55 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=8244 transport=UDP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=1433 pid=525633 user=pentester fd=10u ip_version=4 dvc_id=1922924 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=135 pid=525633 user=pentester fd=9u ip_version=4 dvc_id=1923313 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=5986 pid=525633 user=pentester fd=8u ip_version=4 dvc_id=1923312 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=5985 pid=525633 user=pentester fd=7u ip_version=4 dvc_id=1920834 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=6666 pid=525633 user=pentester fd=6u ip_version=4 dvc_id=1922923 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=9389 pid=525633 user=pentester fd=5u ip_version=4 dvc_id=1921514 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=80 pid=525633 user=pentester fd=4u ip_version=4 dvc_id=1920833 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=ntlmrelayx.py dest_ip=* dest_port=445 pid=525633 user=pentester fd=3u ip_version=4 dvc_id=1921513 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=33863 pid=498334 user=pentester fd=40u ip_version=4 dvc_id=1819137 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=493417 user=pentester fd=37u ip_version=6 dvc_id=1800350 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41585 pid=493417 user=pentester fd=18u ip_version=6 dvc_id=1799161 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=444619 user=root fd=13u ip_version=4 dvc_id=1632907 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8888 pid=237945 user=root fd=7u ip_version=4 dvc_id=328219 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=237382 user=root fd=7u ip_version=4 dvc_id=327255 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=237359 user=root fd=7u ip_version=4 dvc_id=327745 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40699 pid=230415 user=pentester fd=165u ip_version=4 dvc_id=2036042 transport=UDP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41793 pid=230415 user=pentester fd=136u ip_version=4 dvc_id=932342 transport=UDP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=884 user=xrdp fd=11u ip_version=6 dvc_id=10649 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=8623 transport=UDP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=369928 user=root fd=13u ip_version=4 dvc_id=547740 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=10605 transport=TCP


_raw: Fri Jan  9 03:16:54 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6028 transport=UDP


_raw: Fri Jan  9 03:16:53 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=374222 user=root fd=13u ip_version=4 dvc_id=577148 transport=TCP


_raw: Fri Jan  9 03:16:53 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9888 transport=TCP


_raw: Fri Jan  9 03:16:53 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8351 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=161 pid=531185 user=root fd=31u ip_version=6 dvc_id=1071981 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=531185 user=root fd=30u ip_version=6 dvc_id=1071980 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=531185 user=root fd=29u ip_version=6 dvc_id=1070874 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=143 pid=531185 user=root fd=28u ip_version=6 dvc_id=1071979 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=587 pid=531185 user=root fd=27u ip_version=6 dvc_id=1071978 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=25 pid=531185 user=root fd=26u ip_version=6 dvc_id=1070873 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=1883 pid=531185 user=root fd=25u ip_version=6 dvc_id=1073560 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=636 pid=531185 user=root fd=24u ip_version=6 dvc_id=1070872 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=531185 user=root fd=23u ip_version=6 dvc_id=1073559 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=531185 user=root fd=22u ip_version=6 dvc_id=1073558 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=110 pid=531185 user=root fd=21u ip_version=6 dvc_id=1073557 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=443 pid=531185 user=root fd=20u ip_version=6 dvc_id=1070871 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=1434 pid=531185 user=root fd=19u ip_version=6 dvc_id=1070869 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=21 pid=531185 user=root fd=18u ip_version=6 dvc_id=1070870 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=1433 pid=531185 user=root fd=17u ip_version=6 dvc_id=1070868 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=10.0.254.202 dest_port=443 pid=531185 user=root fd=16u ip_version=4 dvc_id=1071977 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=531185 user=root fd=15u ip_version=6 dvc_id=1071976 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=531185 user=root fd=14u ip_version=6 dvc_id=1073555 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=139 pid=531185 user=root fd=11u ip_version=6 dvc_id=1071973 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=47137 pid=531185 user=root fd=9u ip_version=6 dvc_id=1071971 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=5353 pid=531185 user=root fd=8u ip_version=6 dvc_id=1073553 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=137 pid=531185 user=root fd=7u ip_version=6 dvc_id=1071969 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=python3 dest_ip=* dest_port=5355 pid=531185 user=root fd=6u ip_version=6 dvc_id=1070863 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=432113 user=root fd=13u ip_version=4 dvc_id=825741 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=248439 user=root fd=4u ip_version=4 dvc_id=356202 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=247692 user=root fd=4u ip_version=4 dvc_id=356429 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=247685 user=root fd=4u ip_version=4 dvc_id=356425 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39371 pid=232438 user=root fd=9u ip_version=4 dvc_id=312835 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48765 pid=229246 user=pentester fd=125u ip_version=4 dvc_id=1101838 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57915 pid=229246 user=pentester fd=123u ip_version=4 dvc_id=1088352 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46640 pid=229246 user=pentester fd=18u ip_version=4 dvc_id=1099084 transport=UDP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10964 transport=TCP


_raw: Fri Jan  9 03:16:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=644 user=dhcpcd fd=3u ip_version=4 dvc_id=8386 transport=UDP


_raw: Fri Jan  9 03:16:48 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=374357 user=root fd=13u ip_version=4 dvc_id=610489 transport=TCP


_raw: Fri Jan  9 03:16:48 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54822 pid=229091 user=pentester fd=104u ip_version=4 dvc_id=723736 transport=UDP


_raw: Fri Jan  9 03:16:48 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=9991 transport=TCP


_raw: Fri Jan  9 03:16:48 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw:
Proto   Port
udp    54822
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:16:45 PM EST 2026 file_hash=SHA2-256(stdin)= b547eea024f218e12ed6f4be2db85e05c894d2bfc7b93423d921eafa0fcabf56


_raw: Fri Jan  9 03:16:45 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=379089 user=root fd=13u ip_version=4 dvc_id=724569 transport=TCP


_raw: Fri Jan  9 03:16:45 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=35623 pid=232347 user=root fd=9u ip_version=4 dvc_id=310302 transport=TCP


_raw: Fri Jan  9 03:16:45 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57481 pid=231352 user=pentester fd=264u ip_version=4 dvc_id=597476 transport=UDP


_raw: Fri Jan  9 03:16:45 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49937 pid=231352 user=pentester fd=240u ip_version=4 dvc_id=517643 transport=UDP


_raw: Fri Jan  9 03:16:45 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=11631 transport=TCP


_raw: Fri Jan  9 03:16:45 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=8793 transport=UDP


_raw:
Proto   Port
udp    57481
udp    49937
udp       68
udp      546
tcp    35623
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw: Fri Jan  9 03:16:28 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=371144 user=root fd=13u ip_version=4 dvc_id=587256 transport=TCP


_raw: Fri Jan  9 03:16:28 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9064 transport=TCP


_raw: Fri Jan  9 03:16:28 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9567 transport=UDP


_raw: Fri Jan  9 03:16:26 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=371264 user=root fd=13u ip_version=4 dvc_id=582627 transport=TCP


_raw: Fri Jan  9 03:16:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49205 pid=265420 user=pentester fd=94u ip_version=4 dvc_id=851976 transport=UDP


_raw: Fri Jan  9 03:16:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59015 pid=265420 user=pentester fd=76u ip_version=4 dvc_id=852622 transport=UDP


_raw: Fri Jan  9 03:16:26 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=11436 transport=TCP


_raw: Fri Jan  9 03:16:26 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5107 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    49205
udp       68
udp    59015
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=374456 user=root fd=13u ip_version=4 dvc_id=620226 transport=TCP


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=266083 user=pentester fd=37u ip_version=6 dvc_id=387836 transport=TCP


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45365 pid=266083 user=pentester fd=18u ip_version=6 dvc_id=384707 transport=TCP


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236343 user=root fd=7u ip_version=6 dvc_id=321771 transport=TCP


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236343 user=root fd=6u ip_version=4 dvc_id=321769 transport=TCP


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=230845 user=pentester fd=284u ip_version=4 dvc_id=316926 transport=UDP


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=11589 transport=TCP


_raw: Fri Jan  9 03:16:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6995 transport=UDP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=383107 user=root fd=13u ip_version=4 dvc_id=812179 transport=TCP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33174 pid=236685 user=pentester fd=232u ip_version=4 dvc_id=1225817 transport=UDP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40631 pid=236685 user=pentester fd=184u ip_version=4 dvc_id=794326 transport=UDP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39910 pid=236685 user=pentester fd=141u ip_version=4 dvc_id=1228204 transport=UDP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35457 pid=236685 user=pentester fd=140u ip_version=4 dvc_id=1228126 transport=UDP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47096 pid=236685 user=pentester fd=134u ip_version=4 dvc_id=1228206 transport=UDP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48372 pid=236685 user=pentester fd=32u ip_version=4 dvc_id=1222781 transport=UDP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=233374 user=pentester fd=37u ip_version=6 dvc_id=311604 transport=TCP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34413 pid=233374 user=pentester fd=18u ip_version=6 dvc_id=309820 transport=TCP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=879 user=xrdp fd=11u ip_version=6 dvc_id=9927 transport=TCP


_raw: Fri Jan  9 03:16:23 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=7636 transport=UDP


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=434921 user=root fd=13u ip_version=4 dvc_id=1110612 transport=TCP


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=244517 user=root fd=4u ip_version=4 dvc_id=361352 transport=TCP


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243743 user=root fd=4u ip_version=4 dvc_id=359336 transport=TCP


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243736 user=root fd=4u ip_version=4 dvc_id=359331 transport=TCP


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=42705 pid=236964 user=root fd=9u ip_version=4 dvc_id=331640 transport=TCP


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56892 pid=231589 user=pentester fd=163u ip_version=4 dvc_id=1040272 transport=UDP


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=13335 transport=TCP


_raw: Fri Jan  9 03:16:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9240 transport=UDP


_raw:
Proto   Port
udp    56892
udp       68
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:16:08 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=262225 user=root fd=13u ip_version=4 dvc_id=341144 transport=TCP


_raw: Fri Jan  9 03:16:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11485 transport=TCP


_raw: Fri Jan  9 03:16:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7383 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=382814 user=root fd=13u ip_version=4 dvc_id=666198 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346377 user=root fd=4u ip_version=6 dvc_id=547689 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346371 user=root fd=4u ip_version=4 dvc_id=546665 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345824 user=root fd=4u ip_version=6 dvc_id=545158 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345817 user=root fd=4u ip_version=4 dvc_id=543644 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345809 user=root fd=4u ip_version=6 dvc_id=543640 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345801 user=root fd=4u ip_version=4 dvc_id=546974 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39035 pid=345056 user=root fd=9u ip_version=4 dvc_id=542090 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=248254 user=pentester fd=37u ip_version=6 dvc_id=348115 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=37961 pid=248254 user=pentester fd=18u ip_version=6 dvc_id=348893 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=8833 transport=TCP


_raw: Fri Jan  9 03:16:07 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7900 transport=UDP


_raw: Fri Jan  9 03:15:59 PM EST 2026 app=nc dest_ip=* dest_port=4000 pid=456276 user=pentester fd=3u ip_version=4 dvc_id=875613 transport=TCP


_raw: Fri Jan  9 03:15:59 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=40435 pid=444598 user=root fd=9u ip_version=4 dvc_id=835930 transport=TCP


_raw: Fri Jan  9 03:15:59 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=373986 user=root fd=13u ip_version=4 dvc_id=629897 transport=TCP


_raw: Fri Jan  9 03:15:59 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49859 pid=229907 user=pentester fd=187u ip_version=4 dvc_id=850501 transport=UDP


_raw: Fri Jan  9 03:15:59 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59514 pid=229907 user=pentester fd=185u ip_version=4 dvc_id=900694 transport=UDP


_raw: Fri Jan  9 03:15:59 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11787 transport=TCP


_raw: Fri Jan  9 03:15:59 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8323 transport=UDP


_raw:
Proto   Port
udp       68
udp    49859
udp    59514
udp      546
tcp    40435
tcp     4000
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:15:53 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=336989 user=root fd=13u ip_version=4 dvc_id=482669 transport=TCP


_raw: Fri Jan  9 03:15:53 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=10710 transport=TCP


_raw: Fri Jan  9 03:15:53 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=8604 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:15:50 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=386410 user=root fd=13u ip_version=4 dvc_id=1141451 transport=TCP


_raw: Fri Jan  9 03:15:50 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=289211 user=pentester fd=3u ip_version=4 dvc_id=441047 transport=TCP


_raw: Fri Jan  9 03:15:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=264537 user=pentester fd=37u ip_version=6 dvc_id=382820 transport=TCP


_raw: Fri Jan  9 03:15:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45879 pid=264537 user=pentester fd=18u ip_version=6 dvc_id=382695 transport=TCP


_raw: Fri Jan  9 03:15:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12356 transport=TCP


_raw: Fri Jan  9 03:15:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7783 transport=UDP


_raw: Fri Jan  9 03:15:49 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=394134 user=root fd=13u ip_version=4 dvc_id=993173 transport=TCP


_raw: Fri Jan  9 03:15:49 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=345661 user=root fd=7u ip_version=4 dvc_id=781680 transport=TCP


_raw: Fri Jan  9 03:15:49 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43007 pid=242932 user=root fd=10u ip_version=4 dvc_id=354166 transport=TCP


_raw: Fri Jan  9 03:15:49 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48351 pid=228769 user=pentester fd=144u ip_version=4 dvc_id=1350330 transport=UDP


_raw: Fri Jan  9 03:15:49 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35106 pid=228769 user=pentester fd=137u ip_version=4 dvc_id=1349335 transport=UDP


_raw: Fri Jan  9 03:15:49 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11654 transport=TCP


_raw: Fri Jan  9 03:15:49 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8573 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     4444
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp    35106
udp    48351
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    37304
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp     3389


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=383326 user=root fd=13u ip_version=4 dvc_id=749899 transport=TCP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=37581 pid=291247 user=pentester fd=39u ip_version=4 dvc_id=476582 transport=TCP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=241920 user=pentester fd=37u ip_version=6 dvc_id=331558 transport=TCP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34981 pid=241920 user=pentester fd=18u ip_version=6 dvc_id=330759 transport=TCP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233411 user=root fd=7u ip_version=6 dvc_id=311032 transport=TCP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233411 user=root fd=6u ip_version=4 dvc_id=311030 transport=TCP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49475 pid=230497 user=pentester fd=162u ip_version=4 dvc_id=1017146 transport=UDP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53126 pid=230497 user=pentester fd=153u ip_version=4 dvc_id=1016351 transport=UDP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40027 pid=230497 user=pentester fd=114u ip_version=4 dvc_id=646332 transport=UDP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11455 transport=TCP


_raw: Fri Jan  9 03:15:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=8370 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 03:15:01 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=361160 user=root fd=13u ip_version=4 dvc_id=537319 transport=TCP


_raw: Fri Jan  9 03:15:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=861 user=xrdp fd=11u ip_version=6 dvc_id=9717 transport=TCP


_raw: Fri Jan  9 03:15:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8233 transport=UDP


_raw:
Proto   Port
udp    55861
udp       68
udp      546
tcp     8889
tcp       81
tcp       80
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       80
tcp     1883
tcp     9392
tcp     5432
tcp     1883
tcp     5432
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw:
Proto   Port
udp       68
udp    34108
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    56316
udp       68
udp    53837
udp    38759
udp      546
tcp       22
tcp     4444
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=3416477 user=pentester fd=37u ip_version=6 dvc_id=11692055 transport=TCP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=37843 pid=3416477 user=pentester fd=18u ip_version=6 dvc_id=11676636 transport=TCP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1826256 user=root fd=13u ip_version=4 dvc_id=9257035 transport=TCP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42682 pid=245634 user=pentester fd=170u ip_version=4 dvc_id=20423541 transport=UDP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53298 pid=245634 user=pentester fd=129u ip_version=4 dvc_id=19840364 transport=UDP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54525 pid=245634 user=pentester fd=58u ip_version=4 dvc_id=20428282 transport=UDP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56110 pid=245634 user=pentester fd=49u ip_version=4 dvc_id=20423539 transport=UDP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11563 transport=TCP


_raw: Fri Jan  9 03:14:26 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9359 transport=UDP


_raw:
Proto   Port
udp    47462
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Fri Jan  9 03:14:14 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=373240 user=root fd=13u ip_version=4 dvc_id=779507 transport=TCP


_raw: Fri Jan  9 03:14:14 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10773 transport=TCP


_raw: Fri Jan  9 03:14:14 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8491 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:14:08 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=426185 user=root fd=3u ip_version=4 dvc_id=806600 transport=TCP


_raw: Fri Jan  9 03:14:08 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=44705 pid=398953 user=pentester fd=39u ip_version=4 dvc_id=717374 transport=TCP


_raw: Fri Jan  9 03:14:08 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=380017 user=root fd=13u ip_version=4 dvc_id=662593 transport=TCP


_raw: Fri Jan  9 03:14:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=311441 user=pentester fd=37u ip_version=6 dvc_id=483879 transport=TCP


_raw: Fri Jan  9 03:14:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=46021 pid=311441 user=pentester fd=18u ip_version=6 dvc_id=485378 transport=TCP


_raw: Fri Jan  9 03:14:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10833 transport=TCP


_raw: Fri Jan  9 03:14:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=6713 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw:
Proto   Port
udp    48323
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:13:53 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=421636 user=root fd=13u ip_version=4 dvc_id=568176 transport=TCP


_raw: Fri Jan  9 03:13:53 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5179 user=xrdp fd=11u ip_version=6 dvc_id=20647 transport=TCP


_raw: Fri Jan  9 03:13:53 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=7u ip_version=6 dvc_id=16030 transport=TCP


_raw: Fri Jan  9 03:13:53 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=6u ip_version=4 dvc_id=16028 transport=TCP


_raw: Fri Jan  9 03:13:53 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7580 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:13:50 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=375157 user=root fd=13u ip_version=4 dvc_id=736537 transport=TCP


_raw: Fri Jan  9 03:13:50 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=45631 pid=291551 user=pentester fd=40u ip_version=4 dvc_id=488461 transport=TCP


_raw: Fri Jan  9 03:13:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33626 pid=235634 user=pentester fd=108u ip_version=4 dvc_id=932068 transport=UDP


_raw: Fri Jan  9 03:13:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=235364 user=pentester fd=37u ip_version=6 dvc_id=322892 transport=TCP


_raw: Fri Jan  9 03:13:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=37215 pid=235364 user=pentester fd=18u ip_version=6 dvc_id=309006 transport=TCP


_raw: Fri Jan  9 03:13:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=868 user=xrdp fd=11u ip_version=6 dvc_id=11549 transport=TCP


_raw: Fri Jan  9 03:13:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=643 user=dhcpcd fd=3u ip_version=4 dvc_id=702 transport=UDP


_raw:
Proto   Port
udp       68
udp    33626
udp      546
tcp     8889
tcp    45631
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=200601 user=root fd=9u ip_version=4 dvc_id=416153 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=200601 user=root fd=8u ip_version=4 dvc_id=414449 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=200601 user=root fd=7u ip_version=4 dvc_id=417078 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=200601 user=root fd=6u ip_version=4 dvc_id=416152 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=200601 user=root fd=5u ip_version=4 dvc_id=414448 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=200601 user=root fd=4u ip_version=4 dvc_id=414447 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=200601 user=root fd=3u ip_version=4 dvc_id=415235 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=161 pid=189735 user=root fd=29u ip_version=6 dvc_id=391607 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=189735 user=root fd=28u ip_version=6 dvc_id=391606 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=636 pid=189735 user=root fd=27u ip_version=6 dvc_id=390805 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=189735 user=root fd=26u ip_version=6 dvc_id=391605 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=587 pid=189735 user=root fd=25u ip_version=6 dvc_id=391603 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=143 pid=189735 user=root fd=24u ip_version=6 dvc_id=391604 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=25 pid=189735 user=root fd=23u ip_version=6 dvc_id=390804 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=1883 pid=189735 user=root fd=22u ip_version=6 dvc_id=391602 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=189735 user=root fd=21u ip_version=4 dvc_id=390803 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=189735 user=root fd=20u ip_version=6 dvc_id=390802 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=110 pid=189735 user=root fd=19u ip_version=6 dvc_id=391599 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=21 pid=189735 user=root fd=18u ip_version=6 dvc_id=390801 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=1434 pid=189735 user=root fd=17u ip_version=6 dvc_id=390800 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=1433 pid=189735 user=root fd=16u ip_version=6 dvc_id=390799 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=189735 user=root fd=15u ip_version=6 dvc_id=392260 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=189735 user=root fd=14u ip_version=6 dvc_id=390798 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=46615 pid=189735 user=root fd=10u ip_version=6 dvc_id=390795 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=189735 user=root fd=9u ip_version=6 dvc_id=391601 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=5353 pid=189735 user=root fd=8u ip_version=6 dvc_id=392257 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=137 pid=189735 user=root fd=7u ip_version=6 dvc_id=391598 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=5355 pid=189735 user=root fd=6u ip_version=6 dvc_id=390791 transport=UDP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=175198 user=root fd=13u ip_version=4 dvc_id=352462 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=52481 user=_bloodhound fd=9u ip_version=4 dvc_id=108528 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=52481 user=_bloodhound fd=6u ip_version=6 dvc_id=113297 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=46203 user=root fd=282u ip_version=6 dvc_id=100897 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=46203 user=root fd=281u ip_version=6 dvc_id=100891 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=46066 user=postgres fd=7u ip_version=4 dvc_id=98798 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=12115 transport=TCP


_raw: Fri Jan  9 03:13:31 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=6940 transport=UDP


_raw: Fri Jan  9 03:13:25 PM EST 2026 file_hash=SHA2-256(stdin)= 4f45607a2ea52dfb013b1712b5aeccfa91605dece21acc1c619dea968e92caa7


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=381702 user=root fd=13u ip_version=4 dvc_id=617529 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=nc dest_ip=* dest_port=42065 pid=338018 user=pentester fd=3u ip_version=4 dvc_id=523649 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43801 pid=325821 user=root fd=10u ip_version=4 dvc_id=489090 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=nc dest_ip=* dest_port=42045 pid=312532 user=pentester fd=3u ip_version=4 dvc_id=464352 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=296135 user=pentester fd=3u ip_version=4 dvc_id=435429 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=nc dest_ip=* dest_port=42042 pid=295650 user=pentester fd=3u ip_version=4 dvc_id=434483 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=7u ip_version=6 dvc_id=340328 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=6u ip_version=4 dvc_id=340326 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11398 transport=TCP


_raw: Fri Jan  9 03:13:25 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw: Fri Jan  9 03:13:24 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=385599 user=root fd=13u ip_version=4 dvc_id=855984 transport=TCP


_raw: Fri Jan  9 03:13:24 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45543 pid=231925 user=pentester fd=196u ip_version=4 dvc_id=1191579 transport=UDP


_raw: Fri Jan  9 03:13:24 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47710 pid=231925 user=pentester fd=156u ip_version=4 dvc_id=319590 transport=UDP


_raw: Fri Jan  9 03:13:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=11609 transport=TCP


_raw: Fri Jan  9 03:13:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7962 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    42065
tcp    42045
tcp    42042
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 03:13:23 PM EST 2026 file_hash=SHA2-256(stdin)= 0deb9f8d25ed6ff263a63034fc745f5df1c44db65dea3942fb1a439ddf5d6bf9


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=394395 user=root fd=13u ip_version=4 dvc_id=830420 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=364092 user=pentester fd=37u ip_version=6 dvc_id=701842 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41651 pid=364092 user=pentester fd=18u ip_version=6 dvc_id=701717 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=343826 user=pentester fd=3u ip_version=4 dvc_id=627914 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=341044 user=pentester fd=3u ip_version=4 dvc_id=617421 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=7u ip_version=6 dvc_id=390629 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=6u ip_version=4 dvc_id=390627 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60639 pid=231423 user=pentester fd=233u ip_version=4 dvc_id=750412 transport=UDP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46185 pid=231423 user=pentester fd=214u ip_version=4 dvc_id=1155120 transport=UDP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45589 pid=231423 user=pentester fd=203u ip_version=4 dvc_id=1155117 transport=UDP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59038 pid=231423 user=pentester fd=198u ip_version=4 dvc_id=1149402 transport=UDP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44233 pid=231423 user=pentester fd=18u ip_version=4 dvc_id=1153341 transport=UDP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12314 transport=TCP


_raw: Fri Jan  9 03:13:23 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7093 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    46846
udp    39619
udp    40052
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    49830
udp    55658
udp    55880
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:13:01 PM EST 2026 file_hash=SHA2-256(stdin)= fa6dee0ac54fe434658e392acd5cc5fc571ecefbd0a14a979f885ee732835cdf


_raw: Fri Jan  9 03:13:01 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=367411 user=root fd=13u ip_version=4 dvc_id=705676 transport=TCP


_raw: Fri Jan  9 03:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43322 pid=244039 user=pentester fd=182u ip_version=4 dvc_id=1003515 transport=UDP


_raw: Fri Jan  9 03:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45260 pid=244039 user=pentester fd=166u ip_version=4 dvc_id=1003507 transport=UDP


_raw: Fri Jan  9 03:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33496 pid=244039 user=pentester fd=131u ip_version=4 dvc_id=529279 transport=UDP


_raw: Fri Jan  9 03:13:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=955 user=xrdp fd=11u ip_version=6 dvc_id=9949 transport=TCP


_raw: Fri Jan  9 03:13:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=833 user=dhcpcd fd=3u ip_version=4 dvc_id=8707 transport=UDP


_raw:
Proto   Port
udp    33496
udp    43322
udp       68
udp    45260
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    34489
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp     5353
udp      546
tcp      555
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    44931
udp       68
udp      546
tcp    52511
tcp    18806
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    33587
udp    38183
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    38616
udp    35222
udp       68
udp      546
tcp     5000
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=nc dest_ip=* dest_port=1234 pid=472405 user=pentester fd=3u ip_version=4 dvc_id=1807257 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=441202 user=root fd=4u ip_version=6 dvc_id=1701342 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=441196 user=root fd=4u ip_version=4 dvc_id=1699648 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=42765 pid=416910 user=root fd=9u ip_version=4 dvc_id=1615553 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=397985 user=root fd=13u ip_version=4 dvc_id=1555677 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=386625 user=pentester fd=37u ip_version=6 dvc_id=1473291 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=42321 pid=386625 user=pentester fd=18u ip_version=6 dvc_id=1472820 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58000 pid=228905 user=pentester fd=257u ip_version=4 dvc_id=1879767 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39577 pid=228905 user=pentester fd=255u ip_version=4 dvc_id=1879655 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44875 pid=228905 user=pentester fd=251u ip_version=4 dvc_id=1879653 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56027 pid=228905 user=pentester fd=247u ip_version=4 dvc_id=1880084 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45453 pid=228905 user=pentester fd=240u ip_version=4 dvc_id=1880075 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57084 pid=228905 user=pentester fd=236u ip_version=4 dvc_id=1880082 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38608 pid=228905 user=pentester fd=235u ip_version=4 dvc_id=1880080 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52776 pid=228905 user=pentester fd=232u ip_version=4 dvc_id=1880071 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44259 pid=228905 user=pentester fd=223u ip_version=4 dvc_id=1878515 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52181 pid=228905 user=pentester fd=207u ip_version=4 dvc_id=1879752 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54624 pid=228905 user=pentester fd=160u ip_version=4 dvc_id=1876934 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60056 pid=228905 user=pentester fd=159u ip_version=4 dvc_id=1747010 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35856 pid=228905 user=pentester fd=145u ip_version=4 dvc_id=1879745 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47893 pid=228905 user=pentester fd=87u ip_version=4 dvc_id=1861435 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56975 pid=228905 user=pentester fd=65u ip_version=4 dvc_id=1877667 transport=UDP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9130 transport=TCP


_raw: Fri Jan  9 03:12:04 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=6892 transport=UDP


_raw: Fri Jan  9 03:12:01 PM EST 2026 file_hash=SHA2-256(stdin)= f2ebbe78893d4f0ee8947d02a1da7ae61e493bc4e8b4c5ac49e579e6fa32df8f


_raw: Fri Jan  9 03:12:01 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=389217 user=root fd=13u ip_version=4 dvc_id=810781 transport=TCP


_raw: Fri Jan  9 03:12:01 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=248055 user=pentester fd=259u ip_version=4 dvc_id=404724 transport=UDP


_raw: Fri Jan  9 03:12:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58722 pid=241118 user=pentester fd=111u ip_version=4 dvc_id=569649 transport=UDP


_raw: Fri Jan  9 03:12:01 PM EST 2026 app=caido-cli dest_ip=127.0.0.1 dest_port=8080 pid=239427 user=pentester fd=36u ip_version=4 dvc_id=320664 transport=TCP


_raw: Fri Jan  9 03:12:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9605 transport=TCP


_raw: Fri Jan  9 03:12:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8852 transport=UDP


_raw:
Proto   Port
udp     5353
udp    58722
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    54822
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 03:11:43 PM EST 2026 file_hash=SHA2-256(stdin)= cc72a37270f1fd92d15a7b9efa28de1eec42bd877f5908db515a232d1deea4ea


_raw: Fri Jan  9 03:11:43 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=364458 user=root fd=13u ip_version=4 dvc_id=539897 transport=TCP


_raw: Fri Jan  9 03:11:43 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=253531 user=pentester fd=37u ip_version=6 dvc_id=355041 transport=TCP


_raw: Fri Jan  9 03:11:43 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=32889 pid=253531 user=pentester fd=18u ip_version=6 dvc_id=346631 transport=TCP


_raw: Fri Jan  9 03:11:43 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10977 transport=TCP


_raw: Fri Jan  9 03:11:43 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=10255 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp    34999
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp    56892
udp       68
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw: Fri Jan  9 03:11:10 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=370158 user=root fd=13u ip_version=4 dvc_id=584951 transport=TCP


_raw: Fri Jan  9 03:11:10 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39094 pid=355406 user=pentester fd=79u ip_version=4 dvc_id=728051 transport=UDP


_raw: Fri Jan  9 03:11:10 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10745 transport=TCP


_raw: Fri Jan  9 03:11:10 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7654 transport=UDP


_raw:
Proto   Port
udp    39094
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    49859
udp    56854
udp      546
tcp    40435
tcp     4000
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     4444
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    37304
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp     3389


_raw:
Proto   Port
udp    40027
udp    40731
udp       68
udp      546
tcp    37581
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       81
tcp       80
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     5432
tcp     5432
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw: Fri Jan  9 03:09:39 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=385391 user=root fd=13u ip_version=4 dvc_id=2105332 transport=TCP


_raw: Fri Jan  9 03:09:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=262918 user=pentester fd=37u ip_version=6 dvc_id=447377 transport=TCP


_raw: Fri Jan  9 03:09:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=35857 pid=262918 user=pentester fd=18u ip_version=6 dvc_id=448906 transport=TCP


_raw: Fri Jan  9 03:09:39 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34108 pid=232864 user=pentester fd=232u ip_version=4 dvc_id=2197860 transport=UDP


_raw: Fri Jan  9 03:09:39 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=9808 transport=TCP


_raw: Fri Jan  9 03:09:39 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8509 transport=UDP


_raw:
Proto   Port
udp       68
udp    34108
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=421889 user=root fd=13u ip_version=4 dvc_id=568798 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5141 user=xrdp fd=11u ip_version=6 dvc_id=20551 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=7u ip_version=6 dvc_id=15797 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=6u ip_version=4 dvc_id=15789 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=8705 transport=UDP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=372877 user=root fd=13u ip_version=4 dvc_id=674726 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=244564 user=pentester fd=37u ip_version=6 dvc_id=339586 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41905 pid=244564 user=pentester fd=18u ip_version=6 dvc_id=339551 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=8864 transport=TCP


_raw: Fri Jan  9 03:09:33 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=644 user=dhcpcd fd=3u ip_version=4 dvc_id=8272 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    56316
udp       68
udp      546
tcp       22
tcp     4444
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    47462
udp    36128
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Fri Jan  9 03:09:21 PM EST 2026 file_hash=SHA2-256(stdin)= 47d7fd1fd36d2fba25ec37a07cfe3c7520fd4a4641a6ee0ec6001c2f4d7a4a1e


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=371614 user=root fd=13u ip_version=4 dvc_id=959669 transport=TCP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=postman dest_ip=* dest_port=15611 pid=273280 user=pentester fd=139u ip_version=6 dvc_id=424192 transport=TCP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=256337 user=pentester fd=37u ip_version=6 dvc_id=359037 transport=TCP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36977 pid=256337 user=pentester fd=18u ip_version=6 dvc_id=357094 transport=TCP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38066 pid=231959 user=pentester fd=353u ip_version=4 dvc_id=1345494 transport=UDP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42490 pid=231959 user=pentester fd=303u ip_version=4 dvc_id=1348795 transport=UDP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46927 pid=231959 user=pentester fd=280u ip_version=4 dvc_id=1345418 transport=UDP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59203 pid=231959 user=pentester fd=270u ip_version=4 dvc_id=1345420 transport=UDP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55740 pid=231959 user=pentester fd=72u ip_version=4 dvc_id=1348737 transport=UDP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11439 transport=TCP


_raw: Fri Jan  9 03:09:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7777 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw:
Proto   Port
udp    48323
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    33626
udp      546
tcp     8889
tcp    45631
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw: Fri Jan  9 03:08:36 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=351464 user=root fd=13u ip_version=4 dvc_id=525354 transport=TCP


_raw: Fri Jan  9 03:08:36 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=8192 transport=TCP


_raw: Fri Jan  9 03:08:36 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8633 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    47710
udp    52285
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    46846
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    33496
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    42629
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    52511
tcp    18806
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    33587
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    35917
udp       68
udp      546
tcp     5000
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=388462 user=root fd=13u ip_version=4 dvc_id=985851 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=282737 user=pentester fd=37u ip_version=6 dvc_id=573738 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45273 pid=282737 user=pentester fd=18u ip_version=6 dvc_id=573609 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=266223 user=pentester fd=7u ip_version=4 dvc_id=495706 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246329 user=root fd=4u ip_version=6 dvc_id=414127 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246322 user=root fd=4u ip_version=4 dvc_id=415449 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39343 pid=239069 user=root fd=7u ip_version=4 dvc_id=367654 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54926 pid=228992 user=pentester fd=124u ip_version=4 dvc_id=1441932 transport=UDP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56276 pid=228992 user=pentester fd=104u ip_version=4 dvc_id=1273816 transport=UDP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10999 transport=TCP


_raw: Fri Jan  9 03:07:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8528 transport=UDP


_raw:
Proto   Port
udp     5353
udp    58722
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    54822
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350