_raw: Sat Jan 10 03:18:36 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354345 user=root fd=4u ip_version=4 dvc_id=671610 transport=TCP


_raw: Sat Jan 10 03:18:36 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=45447 pid=352062 user=root fd=7u ip_version=4 dvc_id=664561 transport=TCP


_raw: Sat Jan 10 03:18:36 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12365 transport=TCP


_raw: Sat Jan 10 03:18:36 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=999 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp    34005
tcp     3389
tcp     8080

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp      546
tcp    45073
tcp     8889
tcp     3350
tcp    40965
tcp     3389
tcp     8080


_raw: Sat Jan 10 03:18:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5177 user=xrdp fd=11u ip_version=6 dvc_id=20540 transport=TCP


_raw: Sat Jan 10 03:18:21 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=7u ip_version=6 dvc_id=15709 transport=TCP


_raw: Sat Jan 10 03:18:21 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=6u ip_version=4 dvc_id=15707 transport=TCP


_raw: Sat Jan 10 03:18:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7057 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw:
Proto   Port
udp    45033
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       80
tcp     8888
tcp     1883
tcp     9392
tcp     5432
tcp     1883
tcp     5432
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    37121
udp      546
tcp     8889
tcp    42409
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp    46424
udp       68
udp      546
tcp     8889
tcp    42423
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     5986
tcp     5985
tcp     9389
tcp     5000
tcp     8889
tcp      445
tcp      135
tcp       80
tcp       53
tcp     3080
tcp     6666
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     5555
tcp     4444
tcp     4444
tcp       80
tcp     8889
tcp     6666
tcp     3350
tcp     8080
tcp     3389
tcp    33459


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    43671
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp    56551
udp       68
udp    33126
udp      546
tcp    37581
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=33863 pid=498334 user=pentester fd=40u ip_version=4 dvc_id=1819137 transport=TCP


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=493417 user=pentester fd=37u ip_version=6 dvc_id=1800350 transport=TCP


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41585 pid=493417 user=pentester fd=18u ip_version=6 dvc_id=1799161 transport=TCP


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8888 pid=237945 user=root fd=7u ip_version=4 dvc_id=328219 transport=TCP


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=237382 user=root fd=7u ip_version=4 dvc_id=327255 transport=TCP


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=237359 user=root fd=7u ip_version=4 dvc_id=327745 transport=TCP


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=884 user=xrdp fd=11u ip_version=6 dvc_id=10649 transport=TCP


_raw: Sat Jan 10 03:16:32 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=8623 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    33863
tcp     7474
tcp     7687
tcp     8888
tcp     3389
tcp    41585
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     5555
tcp     8889
tcp     8000
tcp     3350
tcp    36523
tcp     8080
tcp     3389


_raw: Sat Jan 10 03:16:08 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=244517 user=root fd=4u ip_version=4 dvc_id=361352 transport=TCP


_raw: Sat Jan 10 03:16:08 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243743 user=root fd=4u ip_version=4 dvc_id=359336 transport=TCP


_raw: Sat Jan 10 03:16:08 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243736 user=root fd=4u ip_version=4 dvc_id=359331 transport=TCP


_raw: Sat Jan 10 03:16:08 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=42705 pid=236964 user=root fd=9u ip_version=4 dvc_id=331640 transport=TCP


_raw: Sat Jan 10 03:16:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=13335 transport=TCP


_raw: Sat Jan 10 03:16:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9240 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:16:05 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10745 transport=TCP


_raw: Sat Jan 10 03:16:05 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7654 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=282737 user=pentester fd=37u ip_version=6 dvc_id=573738 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45273 pid=282737 user=pentester fd=18u ip_version=6 dvc_id=573609 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=266223 user=pentester fd=7u ip_version=4 dvc_id=495706 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246329 user=root fd=4u ip_version=6 dvc_id=414127 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246322 user=root fd=4u ip_version=4 dvc_id=415449 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39343 pid=239069 user=root fd=7u ip_version=4 dvc_id=367654 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48792 pid=228992 user=pentester fd=193u ip_version=4 dvc_id=4559251 transport=UDP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52348 pid=228992 user=pentester fd=178u ip_version=4 dvc_id=4556052 transport=UDP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10999 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8528 transport=UDP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=44213 pid=43899 user=pentester fd=38u ip_version=4 dvc_id=122372 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=39699 user=pentester fd=37u ip_version=6 dvc_id=112726 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=38959 pid=39699 user=pentester fd=18u ip_version=6 dvc_id=111020 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=863 user=xrdp fd=11u ip_version=6 dvc_id=11538 transport=TCP


_raw: Sat Jan 10 03:15:59 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9273 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    44213
tcp     8080
tcp     3389
tcp    38959
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     9999
tcp     4445
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:15:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59020 pid=249816 user=pentester fd=210u ip_version=4 dvc_id=2756435 transport=UDP


_raw: Sat Jan 10 03:15:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58687 pid=249816 user=pentester fd=201u ip_version=4 dvc_id=2757354 transport=UDP


_raw: Sat Jan 10 03:15:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58234 pid=249816 user=pentester fd=200u ip_version=4 dvc_id=2757396 transport=UDP


_raw: Sat Jan 10 03:15:56 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10675 transport=TCP


_raw: Sat Jan 10 03:15:56 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9493 transport=UDP


_raw:
Proto   Port
udp       68
udp    58234
udp    58687
udp    59020
udp      546
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1208738 user=pentester fd=37u ip_version=6 dvc_id=2476941 transport=TCP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=38477 pid=1208738 user=pentester fd=18u ip_version=6 dvc_id=2477658 transport=TCP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59154 pid=254035 user=pentester fd=204u ip_version=4 dvc_id=2581402 transport=UDP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43504 pid=254035 user=pentester fd=190u ip_version=4 dvc_id=2583967 transport=UDP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60700 pid=254035 user=pentester fd=189u ip_version=4 dvc_id=2583940 transport=UDP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46718 pid=254035 user=pentester fd=181u ip_version=4 dvc_id=2583936 transport=UDP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38922 pid=254035 user=pentester fd=136u ip_version=4 dvc_id=2583938 transport=UDP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42653 pid=254035 user=pentester fd=118u ip_version=4 dvc_id=2583965 transport=UDP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12470 transport=TCP


_raw: Sat Jan 10 03:15:55 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=6849 transport=UDP


_raw: Sat Jan 10 03:15:52 PM EST 2026 app=python3 dest_ip=* dest_port=999 pid=287250 user=pentester fd=3u ip_version=4 dvc_id=481081 transport=TCP


_raw: Sat Jan 10 03:15:52 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8000 pid=244152 user=root fd=4u ip_version=4 dvc_id=360555 transport=TCP


_raw: Sat Jan 10 03:15:52 PM EST 2026 app=caddy dest_ip=* dest_port=1337 pid=243869 user=root fd=7u ip_version=6 dvc_id=359617 transport=TCP


_raw: Sat Jan 10 03:15:52 PM EST 2026 app=caddy dest_ip=127.0.0.1 dest_port=2019 pid=243869 user=root fd=4u ip_version=4 dvc_id=359612 transport=TCP


_raw: Sat Jan 10 03:15:52 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=44719 pid=237321 user=root fd=8u ip_version=4 dvc_id=318416 transport=TCP


_raw: Sat Jan 10 03:15:52 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10081 transport=TCP


_raw: Sat Jan 10 03:15:52 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8446 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=1278474 user=pentester fd=3u ip_version=4 dvc_id=2973901 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=nc dest_ip=* dest_port=42099 pid=1271375 user=pentester fd=3u ip_version=4 dvc_id=2952760 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=nc dest_ip=* dest_port=42065 pid=338018 user=pentester fd=3u ip_version=4 dvc_id=523649 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43801 pid=325821 user=root fd=10u ip_version=4 dvc_id=489090 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=7u ip_version=6 dvc_id=340328 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=6u ip_version=4 dvc_id=340326 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11398 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=nc dest_ip=* dest_port=4445 pid=1284065 user=pentester fd=3u ip_version=4 dvc_id=3811631 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=nc dest_ip=* dest_port=4445 pid=1281105 user=pentester fd=3u ip_version=4 dvc_id=3801997 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=python3 dest_ip=* dest_port=808 pid=1260995 user=root fd=3u ip_version=4 dvc_id=3740158 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=1258124 user=root fd=7u ip_version=4 dvc_id=3728198 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=python3 dest_ip=* dest_port=8001 pid=1203947 user=root fd=3u ip_version=4 dvc_id=3555190 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4000 pid=1046516 user=root fd=4u ip_version=6 dvc_id=2271513 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4000 pid=1046506 user=root fd=4u ip_version=4 dvc_id=2271507 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=527675 user=pentester fd=3u ip_version=4 dvc_id=1108987 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=40435 pid=444598 user=root fd=9u ip_version=4 dvc_id=835930 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11787 transport=TCP


_raw: Sat Jan 10 03:15:46 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8323 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    42099
tcp    42065
tcp    43801
tcp       22
tcp     8000
tcp     3350
tcp       22
tcp     3389


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=nc dest_ip=* dest_port=9001 pid=1184444 user=pentester fd=3u ip_version=4 dvc_id=17863327 transport=TCP


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=942027 user=pentester fd=3u ip_version=4 dvc_id=17222747 transport=TCP


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=code dest_ip=127.0.0.1 dest_port=36911 pid=471054 user=pentester fd=53u ip_version=4 dvc_id=6625308 transport=TCP


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=code dest_ip=127.0.0.1 dest_port=15372 pid=471054 user=pentester fd=50u ip_version=4 dvc_id=6620824 transport=TCP


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=11576 transport=TCP


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=6806 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    36911
tcp     4444
tcp     9001
tcp    15372
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:15:43 PM EST 2026 file_hash=SHA2-256(stdin)= 0170cabf61e1f9860aaf4f015192a1edb71b441dcfe9a97fa8aac4d97d2fae0e


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50316 pid=2942 user=pentester fd=228u ip_version=4 dvc_id=332460 transport=UDP


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=893 user=xrdp fd=11u ip_version=6 dvc_id=12405 transport=TCP


_raw: Sat Jan 10 03:15:43 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=665 user=dhcpcd fd=3u ip_version=4 dvc_id=7597 transport=UDP


_raw:
Proto   Port
udp    50316
udp       68
udp      546
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:15:42 PM EST 2026 app=java dest_ip=* dest_port=7474 pid=2138255 user=root fd=282u ip_version=6 dvc_id=3463549 transport=TCP


_raw: Sat Jan 10 03:15:42 PM EST 2026 app=java dest_ip=* dest_port=7687 pid=2138255 user=root fd=281u ip_version=6 dvc_id=3463540 transport=TCP


_raw: Sat Jan 10 03:15:42 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41739 pid=245803 user=root fd=9u ip_version=4 dvc_id=334765 transport=TCP


_raw: Sat Jan 10 03:15:42 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=7u ip_version=6 dvc_id=311986 transport=TCP


_raw: Sat Jan 10 03:15:42 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=6u ip_version=4 dvc_id=311984 transport=TCP


_raw: Sat Jan 10 03:15:42 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10697 transport=TCP


_raw: Sat Jan 10 03:15:42 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7973 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp       22
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp     7687


_raw: Sat Jan 10 03:15:32 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=345661 user=root fd=7u ip_version=4 dvc_id=781680 transport=TCP


_raw: Sat Jan 10 03:15:32 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43007 pid=242932 user=root fd=10u ip_version=4 dvc_id=354166 transport=TCP


_raw: Sat Jan 10 03:15:32 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55482 pid=228769 user=pentester fd=155u ip_version=4 dvc_id=4803792 transport=UDP


_raw: Sat Jan 10 03:15:32 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50060 pid=228769 user=pentester fd=133u ip_version=4 dvc_id=4802067 transport=UDP


_raw: Sat Jan 10 03:15:32 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11654 transport=TCP


_raw: Sat Jan 10 03:15:32 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8573 transport=UDP


_raw:
Proto   Port
udp       68
udp    50060
udp    55482
udp      546
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8080
tcp     8889
tcp     5555
tcp     3389
tcp    11601
tcp     3350


_raw: Sat Jan 10 03:15:22 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=60393 user=pentester fd=3u ip_version=4 dvc_id=131438 transport=TCP


_raw: Sat Jan 10 03:15:22 PM EST 2026 app=chrome dest_ip=224.0.0.251 dest_port=5353 pid=2121 user=pentester fd=254u ip_version=4 dvc_id=20129 transport=UDP


_raw: Sat Jan 10 03:15:22 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=9196 transport=TCP


_raw: Sat Jan 10 03:15:22 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=8482 transport=UDP


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8000
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=1010120 user=pentester fd=7u ip_version=4 dvc_id=2009477 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=1010120 user=pentester fd=6u ip_version=4 dvc_id=2008048 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=1010120 user=pentester fd=5u ip_version=4 dvc_id=2009476 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=1010120 user=pentester fd=4u ip_version=4 dvc_id=2008047 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=1010120 user=pentester fd=3u ip_version=4 dvc_id=2009475 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=52481 user=_bloodhound fd=9u ip_version=4 dvc_id=108528 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=52481 user=_bloodhound fd=6u ip_version=6 dvc_id=113297 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=46203 user=root fd=282u ip_version=6 dvc_id=100897 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=46203 user=root fd=281u ip_version=6 dvc_id=100891 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=46066 user=postgres fd=7u ip_version=4 dvc_id=98798 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=12115 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=6940 transport=UDP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=36205 user=pentester fd=37u ip_version=6 dvc_id=271999 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=46527 pid=36205 user=pentester fd=18u ip_version=6 dvc_id=272617 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41417 pid=2304 user=pentester fd=79u ip_version=4 dvc_id=377269 transport=UDP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10009 transport=TCP


_raw: Sat Jan 10 03:15:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=655 user=dhcpcd fd=3u ip_version=4 dvc_id=9351 transport=UDP


_raw:
Proto   Port
udp    41417
udp       68
udp      546
tcp     3350
tcp     3389
tcp    46527
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42099
tcp    42065
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Jan 10 03:15:19 PM EST 2026 file_hash=SHA2-256(stdin)= e5169d3d6f5db2d2b26bac1fc9eacef3dbdb1313edeca4ca714305bb7f91be98


_raw: Sat Jan 10 03:15:19 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41069 pid=1209483 user=root fd=10u ip_version=4 dvc_id=7425184 transport=TCP


_raw: Sat Jan 10 03:15:19 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1185389 user=pentester fd=37u ip_version=6 dvc_id=7223703 transport=TCP


_raw: Sat Jan 10 03:15:19 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=38993 pid=1185389 user=pentester fd=18u ip_version=6 dvc_id=7223397 transport=TCP


_raw: Sat Jan 10 03:15:19 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12356 transport=TCP


_raw: Sat Jan 10 03:15:19 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7783 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41069
tcp     3350
tcp     3389
tcp     8080
tcp    38993


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=1532848 user=pentester fd=9u ip_version=4 dvc_id=3316296 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=1532848 user=pentester fd=8u ip_version=4 dvc_id=3317980 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=1532848 user=pentester fd=7u ip_version=4 dvc_id=3317979 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=1532848 user=pentester fd=6u ip_version=4 dvc_id=3317085 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=1532848 user=pentester fd=5u ip_version=4 dvc_id=3315386 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1532848 user=pentester fd=4u ip_version=4 dvc_id=3317978 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=1532848 user=pentester fd=3u ip_version=4 dvc_id=3316295 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=248439 user=root fd=4u ip_version=4 dvc_id=356202 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=247692 user=root fd=4u ip_version=4 dvc_id=356429 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=247685 user=root fd=4u ip_version=4 dvc_id=356425 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39371 pid=232438 user=root fd=9u ip_version=4 dvc_id=312835 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10964 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=644 user=dhcpcd fd=3u ip_version=4 dvc_id=8386 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     6666
tcp    39371
tcp      445
tcp       80
tcp      135
tcp     7474
tcp     9389
tcp     8080
tcp     5986
tcp     5985
tcp     7687
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=1175457 user=pentester fd=3u ip_version=4 dvc_id=1976733 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1030139 user=pentester fd=37u ip_version=6 dvc_id=1657871 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=38287 pid=1030139 user=pentester fd=18u ip_version=6 dvc_id=1655361 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=10710 transport=TCP


_raw: Sat Jan 10 03:15:15 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=8604 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8000
tcp    38287
tcp     3350
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687
tcp      444
tcp     4321


_raw: Sat Jan 10 03:15:09 PM EST 2026 app=cursor dest_ip=127.0.0.1 dest_port=41061 pid=877882 user=pentester fd=48u ip_version=4 dvc_id=2191461 transport=TCP


_raw: Sat Jan 10 03:15:09 PM EST 2026 app=cursor dest_ip=127.0.0.1 dest_port=62091 pid=871088 user=pentester fd=49u ip_version=4 dvc_id=2159633 transport=TCP


_raw: Sat Jan 10 03:15:09 PM EST 2026 app=python dest_ip=* dest_port=8081 pid=812755 user=pentester fd=3u ip_version=4 dvc_id=1983570 transport=TCP


_raw: Sat Jan 10 03:15:09 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=36179 pid=804058 user=root fd=9u ip_version=4 dvc_id=1954168 transport=TCP


_raw: Sat Jan 10 03:15:09 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=862 user=xrdp fd=11u ip_version=6 dvc_id=9901 transport=TCP


_raw: Sat Jan 10 03:15:09 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=9273 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8081
tcp    36179
tcp    62091
tcp    41061
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:15:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5141 user=xrdp fd=11u ip_version=6 dvc_id=20551 transport=TCP


_raw: Sat Jan 10 03:15:08 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=7u ip_version=6 dvc_id=15797 transport=TCP


_raw: Sat Jan 10 03:15:08 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=6u ip_version=4 dvc_id=15789 transport=TCP


_raw: Sat Jan 10 03:15:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=8705 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=20502 user=root fd=7u ip_version=6 dvc_id=90136 transport=TCP


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=20502 user=root fd=6u ip_version=4 dvc_id=90134 transport=TCP


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38707 pid=3706 user=pentester fd=196u ip_version=4 dvc_id=546643 transport=UDP


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=docker-proxy dest_ip=* dest_port=80 pid=1377 user=root fd=4u ip_version=6 dvc_id=11963 transport=TCP


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=docker-proxy dest_ip=* dest_port=80 pid=1370 user=root fd=4u ip_version=4 dvc_id=12653 transport=TCP


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=12491 transport=TCP


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=40973 pid=835 user=root fd=9u ip_version=4 dvc_id=9642 transport=TCP


_raw: Sat Jan 10 03:15:03 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=9372 transport=UDP


_raw:
Proto   Port
udp       68
udp    38707
udp      546
tcp    40973
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       80
tcp       22


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1208333 user=pentester fd=37u ip_version=6 dvc_id=2385530 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=40451 pid=1208333 user=pentester fd=18u ip_version=6 dvc_id=2386708 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=250825 user=root fd=282u ip_version=6 dvc_id=370230 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=250825 user=root fd=281u ip_version=6 dvc_id=369192 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=250631 user=postgres fd=7u ip_version=4 dvc_id=370784 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234321 user=root fd=4u ip_version=6 dvc_id=311018 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234315 user=root fd=4u ip_version=4 dvc_id=311009 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46469 pid=232947 user=root fd=9u ip_version=4 dvc_id=307670 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11603 transport=TCP


_raw: Sat Jan 10 03:14:53 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=5984 transport=UDP


_raw: Sat Jan 10 03:14:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=8192 transport=TCP


_raw: Sat Jan 10 03:14:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8633 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1002995 user=pentester fd=37u ip_version=6 dvc_id=2977394 transport=TCP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=44947 pid=1002995 user=pentester fd=18u ip_version=6 dvc_id=2977965 transport=TCP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50278 pid=1000297 user=pentester fd=141u ip_version=4 dvc_id=4077615 transport=UDP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39082 pid=1000297 user=pentester fd=86u ip_version=4 dvc_id=4073376 transport=UDP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46417 pid=1000297 user=pentester fd=84u ip_version=4 dvc_id=4076739 transport=UDP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=534770 user=pentester fd=7u ip_version=4 dvc_id=2195752 transport=TCP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34391 pid=236134 user=root fd=9u ip_version=4 dvc_id=317963 transport=TCP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=12334 transport=TCP


_raw: Sat Jan 10 03:14:49 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=9264 transport=UDP


_raw: Sat Jan 10 03:14:37 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5186 user=xrdp fd=11u ip_version=6 dvc_id=16086 transport=TCP


_raw: Sat Jan 10 03:14:37 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3883 user=root fd=7u ip_version=6 dvc_id=17477 transport=TCP


_raw: Sat Jan 10 03:14:37 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3883 user=root fd=6u ip_version=4 dvc_id=17469 transport=TCP


_raw: Sat Jan 10 03:14:37 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=661 user=dhcpcd fd=3u ip_version=4 dvc_id=7060 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=7u ip_version=6 dvc_id=411401 transport=TCP


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=6u ip_version=4 dvc_id=411399 transport=TCP


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=243989 user=root fd=4u ip_version=4 dvc_id=378478 transport=TCP


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243349 user=root fd=4u ip_version=4 dvc_id=377368 transport=TCP


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243342 user=root fd=4u ip_version=4 dvc_id=377947 transport=TCP


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39943 pid=237975 user=root fd=7u ip_version=4 dvc_id=340760 transport=TCP


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10726 transport=TCP


_raw: Sat Jan 10 03:14:36 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7951 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Jan 10 03:14:35 PM EST 2026 app=conmon dest_ip=127.0.0.1 dest_port=8080 pid=1141901 user=root fd=5u ip_version=4 dvc_id=1865559 transport=TCP


_raw: Sat Jan 10 03:14:35 PM EST 2026 app=conmon dest_ip=127.0.0.1 dest_port=7687 pid=1139828 user=root fd=6u ip_version=4 dvc_id=1858381 transport=TCP


_raw: Sat Jan 10 03:14:35 PM EST 2026 app=conmon dest_ip=127.0.0.1 dest_port=7474 pid=1139828 user=root fd=5u ip_version=4 dvc_id=1858379 transport=TCP


_raw: Sat Jan 10 03:14:35 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=1139798 user=root fd=12u ip_version=4 dvc_id=1859812 transport=TCP


_raw: Sat Jan 10 03:14:35 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=1139798 user=root fd=11u ip_version=4 dvc_id=1859811 transport=UDP


_raw: Sat Jan 10 03:14:35 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10977 transport=TCP


_raw: Sat Jan 10 03:14:35 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=10255 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp       53
tcp     8080
tcp     7687
tcp     7474
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45447
tcp     4444
tcp     3350
tcp     4444
tcp    34005
tcp     3389
tcp     8080


_raw: Sat Jan 10 03:14:24 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53223 pid=285176 user=pentester fd=132u ip_version=4 dvc_id=2111092 transport=UDP


_raw: Sat Jan 10 03:14:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9064 transport=TCP


_raw: Sat Jan 10 03:14:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9567 transport=UDP


_raw:
Proto   Port
udp    53223
udp       68
udp      546
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:14:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5179 user=xrdp fd=11u ip_version=6 dvc_id=20647 transport=TCP


_raw: Sat Jan 10 03:14:21 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=7u ip_version=6 dvc_id=16030 transport=TCP


_raw: Sat Jan 10 03:14:21 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=6u ip_version=4 dvc_id=16028 transport=TCP


_raw: Sat Jan 10 03:14:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7580 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=1158680 user=root fd=7u ip_version=6 dvc_id=3293514 transport=TCP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=1158680 user=root fd=6u ip_version=4 dvc_id=3293512 transport=TCP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8096 pid=1080863 user=root fd=4u ip_version=6 dvc_id=2961370 transport=TCP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8096 pid=1080856 user=root fd=4u ip_version=4 dvc_id=2964526 transport=TCP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7359 pid=1080846 user=root fd=4u ip_version=6 dvc_id=2961363 transport=UDP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7359 pid=1080834 user=root fd=4u ip_version=4 dvc_id=2964518 transport=UDP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=38561 pid=1057173 user=root fd=7u ip_version=4 dvc_id=2578949 transport=TCP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=1012635 user=pentester fd=260u ip_version=4 dvc_id=3685514 transport=UDP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=1012635 user=pentester fd=259u ip_version=4 dvc_id=3685512 transport=UDP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=caido-cli dest_ip=127.0.0.1 dest_port=8080 pid=1010865 user=pentester fd=46u ip_version=4 dvc_id=2400525 transport=TCP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9605 transport=TCP


_raw: Sat Jan 10 03:14:18 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8852 transport=UDP


_raw:
Proto   Port
udp     5353
udp     5353
udp     7359
udp       68
udp     7359
udp      546
tcp       22
tcp    38561
tcp     8096
tcp     8080
tcp       22
tcp     3350
tcp     3389
tcp     8096


_raw: Sat Jan 10 03:14:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1152733 user=pentester fd=37u ip_version=6 dvc_id=2094201 transport=TCP


_raw: Sat Jan 10 03:14:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39287 pid=1152733 user=pentester fd=23u ip_version=6 dvc_id=2093527 transport=TCP


_raw: Sat Jan 10 03:14:13 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=7u ip_version=6 dvc_id=310487 transport=TCP


_raw: Sat Jan 10 03:14:13 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=6u ip_version=4 dvc_id=310485 transport=TCP


_raw: Sat Jan 10 03:14:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=9637 transport=TCP


_raw: Sat Jan 10 03:14:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8557 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     3389
tcp     8080
tcp       22
tcp    39287
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Jan 10 03:14:07 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=9991 transport=TCP


_raw: Sat Jan 10 03:14:07 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:14:05 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10825 transport=TCP


_raw: Sat Jan 10 03:14:05 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5060 transport=UDP


_raw: Sat Jan 10 03:14:02 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=955 user=xrdp fd=11u ip_version=6 dvc_id=9949 transport=TCP


_raw: Sat Jan 10 03:14:02 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=833 user=dhcpcd fd=3u ip_version=4 dvc_id=8707 transport=UDP


_raw:
Proto   Port
udp    40652
udp       68
udp    38707
udp    43487
udp      546
tcp    40973
tcp       80
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8081
tcp    36179
tcp    62091
tcp     8889
tcp    41061
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     8080
tcp       22
tcp    39287
tcp     3350


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=nc dest_ip=* dest_port=4242 pid=1339573 user=pentester fd=3u ip_version=4 dvc_id=2616878 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=45111 pid=1302039 user=pentester fd=39u ip_version=4 dvc_id=2534846 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8081 pid=1253837 user=pentester fd=37u ip_version=6 dvc_id=2405513 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=42643 pid=1253837 user=pentester fd=18u ip_version=6 dvc_id=2359177 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=firefox-esr dest_ip=* dest_port=36105 pid=1188391 user=pentester fd=79u ip_version=4 dvc_id=2713369 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=4000 pid=1186711 user=root fd=14u ip_version=6 dvc_id=2186854 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=46171 pid=1186711 user=root fd=12u ip_version=6 dvc_id=2189329 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=34329 pid=1186711 user=root fd=11u ip_version=6 dvc_id=2189328 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=34165 pid=1186711 user=root fd=10u ip_version=6 dvc_id=2189327 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=52128 pid=1186711 user=root fd=9u ip_version=6 dvc_id=2189326 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=49918 pid=1186711 user=root fd=8u ip_version=6 dvc_id=2189325 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=57914 pid=1186711 user=root fd=7u ip_version=6 dvc_id=2189324 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=58324 pid=1186711 user=root fd=6u ip_version=6 dvc_id=2189323 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=amass dest_ip=* dest_port=35879 pid=1186711 user=root fd=3u ip_version=6 dvc_id=2189322 transport=UDP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=1113069 user=_bloodhound fd=8u ip_version=4 dvc_id=2052925 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=1113069 user=_bloodhound fd=6u ip_version=6 dvc_id=2050645 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=1109517 user=root fd=282u ip_version=6 dvc_id=2042854 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=1109517 user=root fd=281u ip_version=6 dvc_id=2044692 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=1109371 user=postgres fd=7u ip_version=4 dvc_id=2043646 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10773 transport=TCP


_raw: Sat Jan 10 03:13:55 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8491 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34409 pid=253416 user=root fd=10u ip_version=4 dvc_id=342533 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=9058 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8416 transport=UDP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=ruby dest_ip=10.0.254.205 dest_port=4444 pid=1243628 user=pentester fd=8u ip_version=4 dvc_id=3582922 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=33419 pid=1011426 user=pentester fd=5u ip_version=4 dvc_id=3012534 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=44941 pid=1011426 user=pentester fd=4u ip_version=4 dvc_id=3012533 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=python3 dest_ip=* dest_port=8445 pid=1011426 user=pentester fd=3u ip_version=4 dvc_id=3012532 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=python3 dest_ip=* dest_port=5000 pid=990660 user=pentester fd=3u ip_version=4 dvc_id=2967161 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=10739 transport=TCP


_raw: Sat Jan 10 03:13:54 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=8244 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8445
tcp     5000
tcp     4444
tcp    33419
tcp    44941
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=161 pid=1277916 user=root fd=33u ip_version=6 dvc_id=2740379 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=1277916 user=root fd=32u ip_version=6 dvc_id=2735965 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=1277916 user=root fd=31u ip_version=6 dvc_id=2735964 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=143 pid=1277916 user=root fd=30u ip_version=6 dvc_id=2740378 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=587 pid=1277916 user=root fd=29u ip_version=6 dvc_id=2735962 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=25 pid=1277916 user=root fd=28u ip_version=6 dvc_id=2740376 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=443 pid=1277916 user=root fd=27u ip_version=6 dvc_id=2740377 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=1883 pid=1277916 user=root fd=26u ip_version=6 dvc_id=2740375 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=1277916 user=root fd=25u ip_version=6 dvc_id=2740374 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=636 pid=1277916 user=root fd=23u ip_version=6 dvc_id=2735963 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=1277916 user=root fd=22u ip_version=6 dvc_id=2735961 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=110 pid=1277916 user=root fd=21u ip_version=6 dvc_id=2740373 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=21 pid=1277916 user=root fd=20u ip_version=6 dvc_id=2740372 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=1434 pid=1277916 user=root fd=19u ip_version=6 dvc_id=2740371 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=10.0.254.202 dest_port=443 pid=1277916 user=root fd=18u ip_version=4 dvc_id=2739541 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=1433 pid=1277916 user=root fd=17u ip_version=6 dvc_id=2740370 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=1277916 user=root fd=16u ip_version=6 dvc_id=2735960 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=1277916 user=root fd=15u ip_version=6 dvc_id=2738516 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=139 pid=1277916 user=root fd=12u ip_version=6 dvc_id=2735957 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=3128 pid=1277916 user=root fd=10u ip_version=6 dvc_id=2735955 transport=TCP


_raw:
Proto   Port
udp    50316
udp    52650
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=45573 pid=1277916 user=root fd=9u ip_version=6 dvc_id=2735954 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=5353 pid=1277916 user=root fd=8u ip_version=6 dvc_id=2738514 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=137 pid=1277916 user=root fd=7u ip_version=6 dvc_id=2735951 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=5355 pid=1277916 user=root fd=6u ip_version=6 dvc_id=2740366 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=499220 user=pentester fd=9u ip_version=4 dvc_id=1048003 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=499220 user=pentester fd=8u ip_version=4 dvc_id=1050130 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=499220 user=pentester fd=7u ip_version=4 dvc_id=1048002 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=499220 user=pentester fd=6u ip_version=4 dvc_id=1050836 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=499220 user=pentester fd=5u ip_version=4 dvc_id=1050129 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=499220 user=pentester fd=4u ip_version=4 dvc_id=1048001 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=499220 user=pentester fd=3u ip_version=4 dvc_id=1048857 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58259 pid=238617 user=pentester fd=111u ip_version=4 dvc_id=2221173 transport=UDP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9566 transport=TCP


_raw: Sat Jan 10 03:13:52 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=848 transport=UDP


_raw:
Proto   Port
udp    58259
udp       68
udp      443
udp     5353
udp     5355
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
tcp     5985
tcp     5986
tcp     9389
tcp       80
tcp      135
tcp      445
tcp     6666
tcp     1883
tcp     1433
tcp    45573
tcp      636
tcp      587
tcp       53
tcp       21
tcp       25
tcp      110
tcp       88
tcp      143
tcp      139
tcp      443
tcp      389
tcp     3128
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=nc dest_ip=* dest_port=6666 pid=1292126 user=pentester fd=3u ip_version=4 dvc_id=7803336 transport=TCP


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=1260125 user=pentester fd=3u ip_version=4 dvc_id=7674588 transport=TCP


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1206386 user=pentester fd=37u ip_version=6 dvc_id=7453039 transport=TCP


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=43701 pid=1206386 user=pentester fd=18u ip_version=6 dvc_id=7454953 transport=TCP


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57943 pid=245190 user=pentester fd=181u ip_version=4 dvc_id=7853791 transport=UDP


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46627 pid=245190 user=pentester fd=171u ip_version=4 dvc_id=7857201 transport=UDP


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11499 transport=TCP


_raw: Sat Jan 10 03:13:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7573 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    41069
tcp     3350
tcp     3389
tcp     8080
tcp    38993


_raw: Sat Jan 10 03:13:45 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=899 user=xrdp fd=11u ip_version=6 dvc_id=13313 transport=TCP


_raw: Sat Jan 10 03:13:45 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=684 user=dhcpcd fd=3u ip_version=4 dvc_id=9304 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=45953 pid=31615 user=pentester fd=5u ip_version=4 dvc_id=93914 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=python3 dest_ip=127.0.0.1 dest_port=42571 pid=31615 user=pentester fd=4u ip_version=4 dvc_id=93913 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=31615 user=pentester fd=3u ip_version=4 dvc_id=93912 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=ruby dest_ip=10.0.254.203 dest_port=9000 pid=26792 user=pentester fd=7u ip_version=4 dvc_id=92634 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=10047 user=root fd=4u ip_version=4 dvc_id=36450 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=9320 user=root fd=4u ip_version=4 dvc_id=32695 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=9312 user=root fd=4u ip_version=4 dvc_id=35390 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42440 pid=6682 user=pentester fd=241u ip_version=4 dvc_id=163814 transport=UDP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=890 user=xrdp fd=11u ip_version=6 dvc_id=11781 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46391 pid=858 user=root fd=9u ip_version=4 dvc_id=9870 transport=TCP


_raw: Sat Jan 10 03:13:42 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=662 user=dhcpcd fd=3u ip_version=4 dvc_id=6879 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp     7687


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=161 pid=2261142 user=root fd=36u ip_version=6 dvc_id=5742070 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=10.0.254.202 dest_port=443 pid=2261142 user=root fd=35u ip_version=4 dvc_id=5742069 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=636 pid=2261142 user=root fd=34u ip_version=6 dvc_id=5742068 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=2261142 user=root fd=33u ip_version=6 dvc_id=5742967 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=2261142 user=root fd=32u ip_version=6 dvc_id=5742966 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=143 pid=2261142 user=root fd=31u ip_version=6 dvc_id=5742067 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=587 pid=2261142 user=root fd=30u ip_version=6 dvc_id=5742965 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=25 pid=2261142 user=root fd=29u ip_version=6 dvc_id=5742964 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=1883 pid=2261142 user=root fd=28u ip_version=6 dvc_id=5742963 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=2261142 user=root fd=27u ip_version=6 dvc_id=5742962 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=2261142 user=root fd=26u ip_version=6 dvc_id=5742961 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=21 pid=2261142 user=root fd=25u ip_version=6 dvc_id=5742959 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=1434 pid=2261142 user=root fd=24u ip_version=6 dvc_id=5742066 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=2261142 user=root fd=23u ip_version=6 dvc_id=5742958 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=443 pid=2261142 user=root fd=22u ip_version=6 dvc_id=5742065 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=110 pid=2261142 user=root fd=21u ip_version=6 dvc_id=5742960 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=2261142 user=root fd=20u ip_version=6 dvc_id=5742957 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=1433 pid=2261142 user=root fd=19u ip_version=6 dvc_id=5743737 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=2261142 user=root fd=18u ip_version=6 dvc_id=5742956 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=139 pid=2261142 user=root fd=14u ip_version=6 dvc_id=5743736 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=2261142 user=root fd=13u ip_version=6 dvc_id=5742064 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=47835 pid=2261142 user=root fd=12u ip_version=6 dvc_id=5742063 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=2261142 user=root fd=11u ip_version=6 dvc_id=5742062 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=2261142 user=root fd=10u ip_version=6 dvc_id=5742953 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=2261142 user=root fd=9u ip_version=6 dvc_id=5742061 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=5353 pid=2261142 user=root fd=8u ip_version=6 dvc_id=5742951 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=137 pid=2261142 user=root fd=7u ip_version=6 dvc_id=5742060 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=python3 dest_ip=* dest_port=5355 pid=2261142 user=root fd=6u ip_version=6 dvc_id=5742949 transport=UDP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=323237 user=_bloodhound fd=8u ip_version=4 dvc_id=545260 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=323237 user=_bloodhound fd=6u ip_version=6 dvc_id=545881 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=java dest_ip=* dest_port=7474 pid=322395 user=root fd=282u ip_version=6 dvc_id=542173 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=java dest_ip=* dest_port=7687 pid=322395 user=root fd=281u ip_version=6 dvc_id=541385 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=318453 user=postgres fd=7u ip_version=4 dvc_id=531349 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242178 user=root fd=4u ip_version=6 dvc_id=336895 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242162 user=root fd=4u ip_version=4 dvc_id=337706 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=36919 pid=239314 user=root fd=8u ip_version=4 dvc_id=327075 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=7u ip_version=6 dvc_id=318034 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=6u ip_version=4 dvc_id=318026 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=860 user=xrdp fd=11u ip_version=6 dvc_id=10034 transport=TCP


_raw: Sat Jan 10 03:13:32 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7596 transport=UDP


_raw: Sat Jan 10 03:13:21 PM EST 2026 file_hash=SHA2-256(stdin)= eeeb0406e4d79b2ab6ca881bb46986cdfc2fdaa7ef9e6d173e265f6717af5ab4


_raw: Sat Jan 10 03:13:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11538 transport=TCP


_raw: Sat Jan 10 03:13:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9411 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=431858 user=pentester fd=37u ip_version=6 dvc_id=709595 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=33143 pid=431858 user=pentester fd=18u ip_version=6 dvc_id=709500 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293834 user=root fd=4u ip_version=6 dvc_id=458419 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293827 user=root fd=4u ip_version=4 dvc_id=458411 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293244 user=root fd=4u ip_version=6 dvc_id=458003 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293237 user=root fd=4u ip_version=4 dvc_id=451580 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293229 user=root fd=4u ip_version=6 dvc_id=451576 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293219 user=root fd=4u ip_version=4 dvc_id=451569 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41727 pid=248513 user=root fd=9u ip_version=4 dvc_id=345512 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=slorpin dest_ip=* dest_port=80 pid=239584 user=pentester fd=6u ip_version=6 dvc_id=326050 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57646 pid=228282 user=pentester fd=215u ip_version=4 dvc_id=4352218 transport=UDP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46802 pid=228282 user=pentester fd=16u ip_version=4 dvc_id=4293851 transport=UDP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=10640 transport=TCP


_raw: Sat Jan 10 03:13:09 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9426 transport=UDP


_raw: Sat Jan 10 03:12:57 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1108833 user=root fd=3u ip_version=4 dvc_id=2289137 transport=TCP


_raw: Sat Jan 10 03:12:57 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=44705 pid=398953 user=pentester fd=39u ip_version=4 dvc_id=717374 transport=TCP


_raw: Sat Jan 10 03:12:57 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=311441 user=pentester fd=37u ip_version=6 dvc_id=483879 transport=TCP


_raw: Sat Jan 10 03:12:57 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=46021 pid=311441 user=pentester fd=18u ip_version=6 dvc_id=485378 transport=TCP


_raw: Sat Jan 10 03:12:57 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10833 transport=TCP


_raw: Sat Jan 10 03:12:57 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=6713 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:12:54 PM EST 2026 file_hash=SHA2-256(stdin)= 6eff85dce87656e7edf8d8a275fce67b5b13488642c2a5ecace8d8fd3bc79b2f


_raw: Sat Jan 10 03:12:54 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45033 pid=408950 user=pentester fd=62u ip_version=4 dvc_id=1131185 transport=UDP


_raw: Sat Jan 10 03:12:54 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11485 transport=TCP


_raw: Sat Jan 10 03:12:54 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7383 transport=UDP


_raw:
Proto   Port
udp    45033
udp       68
udp      546
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:12:52 PM EST 2026 file_hash=SHA2-256(stdin)= 237487851ca51a4e1e12e7afee5c97eea2820e2aabdaae273b9876ebcce70cde


_raw: Sat Jan 10 03:12:52 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5163 user=xrdp fd=11u ip_version=6 dvc_id=19513 transport=TCP


_raw: Sat Jan 10 03:12:52 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=7u ip_version=6 dvc_id=14958 transport=TCP


_raw: Sat Jan 10 03:12:52 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=6u ip_version=4 dvc_id=14956 transport=TCP


_raw: Sat Jan 10 03:12:52 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=663 user=dhcpcd fd=3u ip_version=4 dvc_id=9433 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:12:47 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9888 transport=TCP


_raw: Sat Jan 10 03:12:47 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8351 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:12:34 PM EST 2026 file_hash=SHA2-256(stdin)= 905b344ebb32b1eae64fb7d4ecabeb315331abdb43f23c3f23f0aa9f90b77dee


_raw: Sat Jan 10 03:12:34 PM EST 2026 app=python3 dest_ip=* dest_port=8888 pid=1226225 user=pentester fd=3u ip_version=4 dvc_id=5235843 transport=TCP


_raw: Sat Jan 10 03:12:34 PM EST 2026 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=448323 user=_gvm fd=4u ip_version=4 dvc_id=741210 transport=TCP


_raw: Sat Jan 10 03:12:34 PM EST 2026 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=448318 user=_gvm fd=4u ip_version=4 dvc_id=735501 transport=TCP


_raw: Sat Jan 10 03:12:34 PM EST 2026 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=447913 user=mosquitto fd=5u ip_version=4 dvc_id=728902 transport=TCP


_raw: Sat Jan 10 03:12:34 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=419499 user=postgres fd=7u ip_version=4 dvc_id=675634 transport=TCP


_raw: Sat Jan 10 03:12:34 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=881 user=xrdp fd=11u ip_version=6 dvc_id=11364 transport=TCP


_raw: Sat Jan 10 03:12:34 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=10273 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       80
tcp     8888
tcp     1883
tcp     9392
tcp     5432
tcp     1883
tcp     5432
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     8000
tcp    38287
tcp     3350
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:12:28 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=3416477 user=pentester fd=37u ip_version=6 dvc_id=11692055 transport=TCP


_raw: Sat Jan 10 03:12:28 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=37843 pid=3416477 user=pentester fd=18u ip_version=6 dvc_id=11676636 transport=TCP


_raw: Sat Jan 10 03:12:28 PM EST 2026 app=nc dest_ip=* dest_port=4403 pid=607891 user=pentester fd=3u ip_version=4 dvc_id=46328146 transport=TCP


_raw: Sat Jan 10 03:12:28 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38985 pid=245634 user=pentester fd=175u ip_version=4 dvc_id=46375750 transport=UDP


_raw: Sat Jan 10 03:12:28 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11563 transport=TCP


_raw: Sat Jan 10 03:12:28 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9359 transport=UDP


_raw:
Proto   Port
udp    38985
udp       68
udp      546
tcp     4403
tcp     8080
tcp     3350
tcp    37843
tcp     3389


_raw: Sat Jan 10 03:12:17 PM EST 2026 file_hash=SHA2-256(stdin)= 3f8d78ffd07c20b130ffb509dfebcf7f7eabe236ed6d71e59a7d87ec5264bd84


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=42765 pid=416910 user=root fd=9u ip_version=4 dvc_id=1615553 transport=TCP


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=386625 user=pentester fd=37u ip_version=6 dvc_id=1473291 transport=TCP


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=42321 pid=386625 user=pentester fd=18u ip_version=6 dvc_id=1472820 transport=TCP


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37642 pid=228905 user=pentester fd=287u ip_version=4 dvc_id=18081549 transport=UDP


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39987 pid=228905 user=pentester fd=232u ip_version=4 dvc_id=18081531 transport=UDP


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41790 pid=228905 user=pentester fd=126u ip_version=4 dvc_id=18085140 transport=UDP


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9130 transport=TCP


_raw: Sat Jan 10 03:12:17 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=6892 transport=UDP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=1754020 user=root fd=9u ip_version=4 dvc_id=4634838 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=1754020 user=root fd=8u ip_version=4 dvc_id=4634837 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=1754020 user=root fd=7u ip_version=4 dvc_id=4634836 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=python3 dest_ip=* dest_port=6666 pid=1754020 user=root fd=6u ip_version=4 dvc_id=4634835 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=python3 dest_ip=* dest_port=9389 pid=1754020 user=root fd=5u ip_version=4 dvc_id=4634834 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1754020 user=root fd=4u ip_version=4 dvc_id=4634833 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=1754020 user=root fd=3u ip_version=4 dvc_id=4635846 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33334 pid=1504425 user=pentester fd=87u ip_version=4 dvc_id=4480062 transport=UDP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=268301 user=root fd=4u ip_version=4 dvc_id=390041 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=267643 user=root fd=4u ip_version=4 dvc_id=390363 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=267635 user=root fd=4u ip_version=4 dvc_id=390359 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46167 pid=239046 user=root fd=7u ip_version=4 dvc_id=323333 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11308 transport=TCP


_raw: Sat Jan 10 03:12:15 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7652 transport=UDP


_raw: Sat Jan 10 03:12:13 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=42409 pid=1069172 user=pentester fd=41u ip_version=4 dvc_id=4643381 transport=TCP


_raw: Sat Jan 10 03:12:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=262918 user=pentester fd=37u ip_version=6 dvc_id=447377 transport=TCP


_raw: Sat Jan 10 03:12:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=35857 pid=262918 user=pentester fd=18u ip_version=6 dvc_id=448906 transport=TCP


_raw: Sat Jan 10 03:12:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47323 pid=232864 user=pentester fd=212u ip_version=4 dvc_id=5655944 transport=UDP


_raw: Sat Jan 10 03:12:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=9808 transport=TCP


_raw: Sat Jan 10 03:12:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8509 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp       53
tcp     8889
tcp     8080
tcp     7687
tcp     7474
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    47323
udp       68
udp      546
tcp    42409
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw: Sat Jan 10 03:12:11 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=1321623 user=pentester fd=3u ip_version=4 dvc_id=3280775 transport=TCP


_raw: Sat Jan 10 03:12:11 PM EST 2026 app=python3 dest_ip=* dest_port=5000 pid=1065801 user=pentester fd=3u ip_version=4 dvc_id=2321465 transport=TCP


_raw: Sat Jan 10 03:12:11 PM EST 2026 app=conmon dest_ip=* dest_port=3080 pid=365257 user=root fd=5u ip_version=4 dvc_id=698656 transport=TCP


_raw: Sat Jan 10 03:12:11 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=12u ip_version=4 dvc_id=572135 transport=TCP


_raw: Sat Jan 10 03:12:11 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=11u ip_version=4 dvc_id=572134 transport=UDP


_raw: Sat Jan 10 03:12:11 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10738 transport=TCP


_raw: Sat Jan 10 03:12:11 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9382 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     5000
tcp      445
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:12:09 PM EST 2026 file_hash=SHA2-256(stdin)= e619d382e06f1a9fcf7e1ebf91f6b4d077e8a5034af4ed0f8c44c7ffbbbcd8a5


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=1229515 user=pentester fd=3u ip_version=4 dvc_id=3298043 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=nc dest_ip=* dest_port=6666 pid=1227342 user=pentester fd=3u ip_version=4 dvc_id=3290463 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=1202766 user=pentester fd=3u ip_version=4 dvc_id=3207734 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1190855 user=pentester fd=3u ip_version=4 dvc_id=3165186 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1186599 user=pentester fd=3u ip_version=4 dvc_id=3144100 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1133580 user=pentester fd=37u ip_version=6 dvc_id=2993490 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=33459 pid=1133580 user=pentester fd=18u ip_version=6 dvc_id=2992733 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=9794 transport=TCP


_raw: Sat Jan 10 03:12:09 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5935 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     5555
tcp     4444
tcp     4444
tcp       80
tcp     6666
tcp     3350
tcp     8080
tcp     3389
tcp    33459


_raw: Sat Jan 10 03:12:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1287632 user=pentester fd=37u ip_version=6 dvc_id=8816003 transport=TCP


_raw: Sat Jan 10 03:12:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=42423 pid=1287632 user=pentester fd=18u ip_version=6 dvc_id=8808713 transport=TCP


_raw: Sat Jan 10 03:12:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46424 pid=1161837 user=pentester fd=224u ip_version=4 dvc_id=8079023 transport=UDP


_raw: Sat Jan 10 03:12:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42739 pid=1161837 user=pentester fd=210u ip_version=4 dvc_id=9904459 transport=UDP


_raw: Sat Jan 10 03:12:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51819 pid=1161837 user=pentester fd=48u ip_version=4 dvc_id=10014908 transport=UDP


_raw: Sat Jan 10 03:12:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=879 user=xrdp fd=11u ip_version=6 dvc_id=9927 transport=TCP


_raw: Sat Jan 10 03:12:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=7636 transport=UDP


_raw:
Proto   Port
udp    53223
udp       68
udp    53648
udp    50691
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:11:51 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=11824 transport=TCP


_raw: Sat Jan 10 03:11:51 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5048 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=python dest_ip=* dest_port=80 pid=1333694 user=pentester fd=3u ip_version=4 dvc_id=3845589 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1179548 user=pentester fd=3u ip_version=4 dvc_id=3404684 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=46207 pid=517397 user=pentester fd=42u ip_version=4 dvc_id=1216533 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8081 pid=514831 user=pentester fd=37u ip_version=6 dvc_id=1210306 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=44845 pid=514831 user=pentester fd=18u ip_version=6 dvc_id=1207232 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=luftweht-viewer dest_ip=* dest_port=8080 pid=256099 user=pentester fd=6u ip_version=6 dvc_id=377468 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=7u ip_version=6 dvc_id=351468 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=6u ip_version=4 dvc_id=351466 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=socat dest_ip=* dest_port=8000 pid=234221 user=pentester fd=5u ip_version=4 dvc_id=316787 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=10780 transport=TCP


_raw: Sat Jan 10 03:11:47 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9556 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp       80
tcp     4444
tcp    46207
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8081
tcp    44845
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:11:44 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5203 user=xrdp fd=11u ip_version=6 dvc_id=20481 transport=TCP


_raw: Sat Jan 10 03:11:44 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=7u ip_version=6 dvc_id=12897 transport=TCP


_raw: Sat Jan 10 03:11:44 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=6u ip_version=4 dvc_id=12895 transport=TCP


_raw: Sat Jan 10 03:11:44 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=665 user=dhcpcd fd=3u ip_version=4 dvc_id=9431 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Jan 10 03:11:41 PM EST 2026 file_hash=SHA2-256(stdin)= e1caa41b42adc0fed5d0983c0e2aa80c86cc47af54156fa504bf00caeed64d79


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=python3 dest_ip=* dest_port=9999 pid=1348791 user=pentester fd=3u ip_version=4 dvc_id=3911523 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=1348226 user=pentester fd=3u ip_version=4 dvc_id=3911199 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=nc dest_ip=* dest_port=4321 pid=1342261 user=pentester fd=3u ip_version=4 dvc_id=3869378 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=nc dest_ip=* dest_port=42099 pid=1329923 user=pentester fd=3u ip_version=4 dvc_id=3821715 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=nc dest_ip=* dest_port=6666 pid=1326837 user=pentester fd=3u ip_version=4 dvc_id=3812115 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=python3 dest_ip=* dest_port=8888 pid=1324042 user=pentester fd=3u ip_version=4 dvc_id=3805170 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=socat dest_ip=* dest_port=5557 pid=1322745 user=pentester fd=5u ip_version=4 dvc_id=3801333 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=1322634 user=pentester fd=3u ip_version=4 dvc_id=3801241 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=343826 user=pentester fd=3u ip_version=4 dvc_id=627914 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=7u ip_version=6 dvc_id=390629 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=6u ip_version=4 dvc_id=390627 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12314 transport=TCP


_raw: Sat Jan 10 03:11:41 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7093 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp       22
tcp     4321
tcp     8888
tcp     5557
tcp     5555
tcp    42099
tcp     9999
tcp     6666
tcp     8000
tcp     3350
tcp       22
tcp     3389


_raw: Sat Jan 10 03:11:39 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43671 pid=982892 user=root fd=7u ip_version=4 dvc_id=1552207 transport=TCP


_raw: Sat Jan 10 03:11:39 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11675 transport=TCP


_raw: Sat Jan 10 03:11:39 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7094 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    43671
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    44213
tcp     8889
tcp     8080
tcp     3389
tcp    38959
tcp     3350


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33126 pid=994199 user=pentester fd=80u ip_version=4 dvc_id=2260510 transport=UDP


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=37581 pid=291247 user=pentester fd=39u ip_version=4 dvc_id=476582 transport=TCP


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=241920 user=pentester fd=37u ip_version=6 dvc_id=331558 transport=TCP


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34981 pid=241920 user=pentester fd=18u ip_version=6 dvc_id=330759 transport=TCP


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233411 user=root fd=7u ip_version=6 dvc_id=311032 transport=TCP


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233411 user=root fd=6u ip_version=4 dvc_id=311030 transport=TCP


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11455 transport=TCP


_raw: Sat Jan 10 03:11:35 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=8370 transport=UDP


_raw: Sat Jan 10 03:11:34 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=266083 user=pentester fd=37u ip_version=6 dvc_id=387836 transport=TCP


_raw: Sat Jan 10 03:11:34 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45365 pid=266083 user=pentester fd=18u ip_version=6 dvc_id=384707 transport=TCP


_raw: Sat Jan 10 03:11:34 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236343 user=root fd=7u ip_version=6 dvc_id=321771 transport=TCP


_raw: Sat Jan 10 03:11:34 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236343 user=root fd=6u ip_version=4 dvc_id=321769 transport=TCP


_raw: Sat Jan 10 03:11:34 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=230845 user=pentester fd=284u ip_version=4 dvc_id=316926 transport=UDP


_raw: Sat Jan 10 03:11:34 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=11589 transport=TCP


_raw: Sat Jan 10 03:11:34 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6995 transport=UDP


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp    33126
udp      546
tcp    37581
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp      546
tcp    44705
tcp     8889
tcp       80
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=nc dest_ip=* dest_port=9001 pid=1184444 user=pentester fd=3u ip_version=4 dvc_id=17863327 transport=TCP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=942027 user=pentester fd=3u ip_version=4 dvc_id=17222747 transport=TCP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=code dest_ip=127.0.0.1 dest_port=36911 pid=471054 user=pentester fd=53u ip_version=4 dvc_id=6625308 transport=TCP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=code dest_ip=127.0.0.1 dest_port=15372 pid=471054 user=pentester fd=50u ip_version=4 dvc_id=6620824 transport=TCP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=364610 user=root fd=13u ip_version=4 dvc_id=524663 transport=TCP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=11576 transport=TCP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=6806 transport=UDP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=11436 transport=TCP


_raw: Sat Jan 10 03:11:30 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5107 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:11:28 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=878072 user=pentester fd=37u ip_version=6 dvc_id=2434934 transport=TCP


_raw: Sat Jan 10 03:11:28 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36523 pid=878072 user=pentester fd=18u ip_version=6 dvc_id=2433983 transport=TCP


_raw: Sat Jan 10 03:11:28 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=673473 user=pentester fd=3u ip_version=4 dvc_id=1710725 transport=TCP


_raw: Sat Jan 10 03:11:28 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=116283 user=pentester fd=3u ip_version=4 dvc_id=413387 transport=TCP


_raw: Sat Jan 10 03:11:28 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=115459 user=pentester fd=3u ip_version=4 dvc_id=412829 transport=TCP


_raw: Sat Jan 10 03:11:28 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=9102 transport=TCP


_raw: Sat Jan 10 03:11:28 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=643 user=dhcpcd fd=3u ip_version=4 dvc_id=9381 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     4444
tcp     5555
tcp     8000
tcp     3350
tcp    36523
tcp     8080
tcp     3389


_raw:
Proto   Port
udp    37700
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    46527
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    36911
tcp     4444
tcp     9001
tcp    15372
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp     8000
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    33126
udp      546
tcp    37581
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw: Sat Jan 10 03:10:58 PM EST 2026 app=nc dest_ip=* dest_port=9999 pid=1119066 user=pentester fd=3u ip_version=4 dvc_id=1865212 transport=TCP


_raw: Sat Jan 10 03:10:58 PM EST 2026 app=nc dest_ip=* dest_port=4445 pid=1095016 user=pentester fd=3u ip_version=4 dvc_id=1821939 transport=TCP


_raw: Sat Jan 10 03:10:58 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35609 pid=1068225 user=pentester fd=196u ip_version=4 dvc_id=2330941 transport=UDP


_raw: Sat Jan 10 03:10:58 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=10605 transport=TCP


_raw: Sat Jan 10 03:10:58 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6028 transport=UDP


_raw:
Proto   Port
udp    35609
udp       68
udp      546
tcp     9999
tcp     4445
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    56054
udp      546
tcp    45073
tcp     8889
tcp     3350
tcp    40965
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=36101 pid=1124640 user=pentester fd=39u ip_version=4 dvc_id=6018552 transport=TCP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=1114417 user=pentester fd=37u ip_version=6 dvc_id=5988300 transport=TCP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39079 pid=1114417 user=pentester fd=18u ip_version=6 dvc_id=5987256 transport=TCP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45012 pid=1068259 user=pentester fd=250u ip_version=4 dvc_id=6840484 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43895 pid=1068259 user=pentester fd=239u ip_version=4 dvc_id=6840479 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53784 pid=1068259 user=pentester fd=235u ip_version=4 dvc_id=6837021 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39670 pid=1068259 user=pentester fd=234u ip_version=4 dvc_id=6839923 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48440 pid=1068259 user=pentester fd=220u ip_version=4 dvc_id=6841787 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46540 pid=1068259 user=pentester fd=211u ip_version=4 dvc_id=6837127 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43308 pid=1068259 user=pentester fd=210u ip_version=4 dvc_id=6840419 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49353 pid=1068259 user=pentester fd=201u ip_version=4 dvc_id=6841403 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50259 pid=1068259 user=pentester fd=161u ip_version=4 dvc_id=6840452 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45430 pid=1068259 user=pentester fd=98u ip_version=4 dvc_id=6839910 transport=UDP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11649 transport=TCP


_raw: Sat Jan 10 03:10:41 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5052 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    58259
udp       68
udp      443
udp     5353
udp     5355
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
tcp     5985
tcp     5986
tcp     9389
tcp       80
tcp      135
tcp      445
tcp     8889
tcp     6666
tcp     1883
tcp     1433
tcp    45573
tcp      636
tcp      587
tcp       53
tcp       21
tcp       25
tcp      110
tcp       88
tcp      143
tcp      139
tcp      443
tcp      389
tcp     3128
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     5000
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8080
tcp     8889
tcp     5555
tcp     3389
tcp    11601
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    42099
tcp    42065
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=11482 user=_bloodhound fd=8u ip_version=4 dvc_id=47034 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=11482 user=_bloodhound fd=6u ip_version=6 dvc_id=50255 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=10209 user=root fd=615u ip_version=6 dvc_id=49231 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=10209 user=root fd=614u ip_version=6 dvc_id=48721 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=sliver-server dest_ip=* dest_port=31337 pid=7558 user=pentester fd=13u ip_version=6 dvc_id=40790 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42221 pid=4334 user=pentester fd=160u ip_version=4 dvc_id=381960 transport=UDP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57617 pid=4334 user=pentester fd=155u ip_version=4 dvc_id=381958 transport=UDP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48554 pid=4334 user=pentester fd=85u ip_version=4 dvc_id=378549 transport=UDP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55823 pid=4334 user=pentester fd=18u ip_version=4 dvc_id=380327 transport=UDP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=node dest_ip=* dest_port=3001 pid=3929 user=pentester fd=26u ip_version=6 dvc_id=19326 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=node dest_ip=* dest_port=1337 pid=3672 user=planka fd=26u ip_version=6 dvc_id=23312 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=903 user=postgres fd=7u ip_version=4 dvc_id=9668 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=890 user=xrdp fd=11u ip_version=6 dvc_id=10884 transport=TCP


_raw: Sat Jan 10 03:10:17 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=659 user=dhcpcd fd=3u ip_version=4 dvc_id=7152 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       80
tcp     8888
tcp     1883
tcp     9392
tcp     5432
tcp     1883
tcp     5432
tcp     3389
tcp     3350


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=43215 pid=154168 user=pentester fd=39u ip_version=4 dvc_id=561443 transport=TCP


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=127364 user=pentester fd=37u ip_version=6 dvc_id=474389 transport=TCP


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36381 pid=127364 user=pentester fd=18u ip_version=6 dvc_id=471496 transport=TCP


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=111832 user=pentester fd=3u ip_version=4 dvc_id=408055 transport=TCP


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=111454 user=pentester fd=7u ip_version=4 dvc_id=405036 transport=TCP


_raw: Sat Jan 10 03:10:14 PM EST 2026 app=nc dest_ip=* dest_port=9999 pid=40493 user=pentester fd=3u ip_version=4 dvc_id=121859 transport=TCP