_raw: Tue Oct 21 01:06:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76747 user=root fd=7u ip_version=6 dvc_id=89962 transport=TCP


_raw: Tue Oct 21 01:06:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76747 user=root fd=6u ip_version=4 dvc_id=89952 transport=TCP


_raw: Tue Oct 21 01:06:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76646 user=root fd=7u ip_version=4 dvc_id=91349 transport=UDP


_raw: Tue Oct 21 01:06:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=574 transport=UDP


_raw: Tue Oct 21 01:06:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=2616 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw: Tue Oct 21 01:04:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77880 user=xrdp fd=11u ip_version=6 dvc_id=95931 transport=TCP


_raw: Tue Oct 21 01:04:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=89883 transport=TCP


_raw: Tue Oct 21 01:04:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=89881 transport=TCP


_raw: Tue Oct 21 01:04:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76525 user=root fd=7u ip_version=4 dvc_id=88780 transport=UDP


_raw: Tue Oct 21 01:04:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=600 transport=UDP


_raw: Tue Oct 21 01:04:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4190 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Tue Oct 21 01:04:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77941 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Tue Oct 21 01:04:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76689 user=root fd=7u ip_version=6 dvc_id=90829 transport=TCP


_raw: Tue Oct 21 01:04:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76689 user=root fd=6u ip_version=4 dvc_id=90819 transport=TCP


_raw: Tue Oct 21 01:04:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76587 user=root fd=7u ip_version=4 dvc_id=91361 transport=UDP


_raw: Tue Oct 21 01:04:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=1723 transport=UDP


_raw: Tue Oct 21 01:04:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=3743 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Tue Oct 21 01:04:08 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77880 user=xrdp fd=11u ip_version=6 dvc_id=93936 transport=TCP


_raw: Tue Oct 21 01:04:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=7u ip_version=6 dvc_id=91280 transport=TCP


_raw: Tue Oct 21 01:04:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=6u ip_version=4 dvc_id=91270 transport=TCP


_raw: Tue Oct 21 01:04:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76526 user=root fd=7u ip_version=4 dvc_id=90660 transport=UDP


_raw: Tue Oct 21 01:04:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=2600 transport=UDP


_raw: Tue Oct 21 01:04:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=1004 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Tue Oct 21 01:02:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77963 user=xrdp fd=11u ip_version=6 dvc_id=95457 transport=TCP


_raw: Tue Oct 21 01:02:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76707 user=root fd=7u ip_version=6 dvc_id=91565 transport=TCP


_raw: Tue Oct 21 01:02:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76707 user=root fd=6u ip_version=4 dvc_id=91563 transport=TCP


_raw: Tue Oct 21 01:02:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76607 user=root fd=7u ip_version=4 dvc_id=92441 transport=UDP


_raw: Tue Oct 21 01:02:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3717 transport=UDP


_raw: Tue Oct 21 01:02:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1952 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Tue Oct 21 00:59:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77890 user=xrdp fd=11u ip_version=6 dvc_id=95409 transport=TCP


_raw: Tue Oct 21 00:59:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=7u ip_version=6 dvc_id=89816 transport=TCP


_raw: Tue Oct 21 00:59:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=6u ip_version=4 dvc_id=89814 transport=TCP


_raw: Tue Oct 21 00:59:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76535 user=root fd=7u ip_version=4 dvc_id=92511 transport=UDP


_raw: Tue Oct 21 00:59:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=5170 transport=UDP


_raw: Tue Oct 21 00:59:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4200 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw: Mon Oct 20 18:17:52 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79794 user=root fd=13u ip_version=4 dvc_id=98053 transport=TCP


_raw: Mon Oct 20 18:17:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77779 user=xrdp fd=11u ip_version=6 dvc_id=94828 transport=TCP


_raw: Mon Oct 20 18:17:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76540 user=root fd=7u ip_version=6 dvc_id=90889 transport=TCP


_raw: Mon Oct 20 18:17:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76540 user=root fd=6u ip_version=4 dvc_id=90887 transport=TCP


_raw: Mon Oct 20 18:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76435 user=root fd=7u ip_version=4 dvc_id=89970 transport=UDP


_raw: Mon Oct 20 18:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4144 transport=UDP


_raw: Mon Oct 20 18:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=422 transport=UDP


_raw: Mon Oct 20 18:17:48 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80170 user=root fd=13u ip_version=4 dvc_id=100430 transport=TCP


_raw: Mon Oct 20 18:17:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78082 user=xrdp fd=11u ip_version=6 dvc_id=95621 transport=TCP


_raw: Mon Oct 20 18:17:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76825 user=root fd=7u ip_version=6 dvc_id=89737 transport=TCP


_raw: Mon Oct 20 18:17:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76825 user=root fd=6u ip_version=4 dvc_id=89727 transport=TCP


_raw: Mon Oct 20 18:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76724 user=root fd=7u ip_version=4 dvc_id=88561 transport=UDP


_raw: Mon Oct 20 18:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw: Mon Oct 20 18:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=3590 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Mon Oct 20 18:17:15 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79771 user=root fd=13u ip_version=4 dvc_id=98469 transport=TCP


_raw: Mon Oct 20 18:17:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77759 user=xrdp fd=11u ip_version=6 dvc_id=95464 transport=TCP


_raw: Mon Oct 20 18:17:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76515 user=root fd=7u ip_version=6 dvc_id=91549 transport=TCP


_raw: Mon Oct 20 18:17:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76515 user=root fd=6u ip_version=4 dvc_id=91547 transport=TCP


_raw: Mon Oct 20 18:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76414 user=root fd=7u ip_version=4 dvc_id=89012 transport=UDP


_raw: Mon Oct 20 18:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=3512 transport=UDP


_raw: Mon Oct 20 18:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=3491 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Mon Oct 20 18:16:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79844 user=root fd=13u ip_version=4 dvc_id=100878 transport=TCP


_raw: Mon Oct 20 18:16:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77745 user=xrdp fd=11u ip_version=6 dvc_id=95375 transport=TCP


_raw: Mon Oct 20 18:16:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76502 user=root fd=7u ip_version=6 dvc_id=93241 transport=TCP


_raw: Mon Oct 20 18:16:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76502 user=root fd=6u ip_version=4 dvc_id=93231 transport=TCP


_raw: Mon Oct 20 18:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76401 user=root fd=7u ip_version=4 dvc_id=91147 transport=UDP


_raw: Mon Oct 20 18:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2691 transport=UDP


_raw: Mon Oct 20 18:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2674 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Mon Oct 20 18:16:11 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79576 user=root fd=13u ip_version=4 dvc_id=98713 transport=TCP


_raw: Mon Oct 20 18:16:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77747 user=xrdp fd=11u ip_version=6 dvc_id=95560 transport=TCP


_raw: Mon Oct 20 18:16:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76510 user=root fd=7u ip_version=6 dvc_id=90522 transport=TCP


_raw: Mon Oct 20 18:16:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76510 user=root fd=6u ip_version=4 dvc_id=90512 transport=TCP


_raw: Mon Oct 20 18:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76409 user=root fd=7u ip_version=4 dvc_id=91350 transport=UDP


_raw: Mon Oct 20 18:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=730 transport=UDP


_raw: Mon Oct 20 18:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3874 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Mon Oct 20 18:12:39 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79744 user=root fd=13u ip_version=4 dvc_id=98978 transport=TCP


_raw: Mon Oct 20 18:12:39 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77823 user=xrdp fd=11u ip_version=6 dvc_id=94687 transport=TCP


_raw: Mon Oct 20 18:12:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76585 user=root fd=7u ip_version=6 dvc_id=89768 transport=TCP


_raw: Mon Oct 20 18:12:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76585 user=root fd=6u ip_version=4 dvc_id=89758 transport=TCP


_raw: Mon Oct 20 18:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76484 user=root fd=7u ip_version=4 dvc_id=90467 transport=UDP


_raw: Mon Oct 20 18:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=739 transport=UDP


_raw: Mon Oct 20 18:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1592 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Mon Oct 20 17:17:52 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79794 user=root fd=13u ip_version=4 dvc_id=98053 transport=TCP


_raw: Mon Oct 20 17:17:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77779 user=xrdp fd=11u ip_version=6 dvc_id=94828 transport=TCP


_raw: Mon Oct 20 17:17:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76540 user=root fd=7u ip_version=6 dvc_id=90889 transport=TCP


_raw: Mon Oct 20 17:17:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76540 user=root fd=6u ip_version=4 dvc_id=90887 transport=TCP


_raw: Mon Oct 20 17:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76435 user=root fd=7u ip_version=4 dvc_id=89970 transport=UDP


_raw: Mon Oct 20 17:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4144 transport=UDP


_raw: Mon Oct 20 17:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=422 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Mon Oct 20 17:17:48 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80170 user=root fd=13u ip_version=4 dvc_id=100430 transport=TCP


_raw: Mon Oct 20 17:17:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78082 user=xrdp fd=11u ip_version=6 dvc_id=95621 transport=TCP


_raw: Mon Oct 20 17:17:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76825 user=root fd=7u ip_version=6 dvc_id=89737 transport=TCP


_raw: Mon Oct 20 17:17:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76825 user=root fd=6u ip_version=4 dvc_id=89727 transport=TCP


_raw: Mon Oct 20 17:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76724 user=root fd=7u ip_version=4 dvc_id=88561 transport=UDP


_raw: Mon Oct 20 17:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw: Mon Oct 20 17:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=3590 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Mon Oct 20 17:17:15 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79771 user=root fd=13u ip_version=4 dvc_id=98469 transport=TCP


_raw: Mon Oct 20 17:17:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77759 user=xrdp fd=11u ip_version=6 dvc_id=95464 transport=TCP


_raw: Mon Oct 20 17:17:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76515 user=root fd=7u ip_version=6 dvc_id=91549 transport=TCP


_raw: Mon Oct 20 17:17:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76515 user=root fd=6u ip_version=4 dvc_id=91547 transport=TCP


_raw: Mon Oct 20 17:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76414 user=root fd=7u ip_version=4 dvc_id=89012 transport=UDP


_raw: Mon Oct 20 17:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=3512 transport=UDP


_raw: Mon Oct 20 17:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=3491 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Mon Oct 20 17:16:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79844 user=root fd=13u ip_version=4 dvc_id=100878 transport=TCP


_raw: Mon Oct 20 17:16:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77745 user=xrdp fd=11u ip_version=6 dvc_id=95375 transport=TCP


_raw: Mon Oct 20 17:16:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76502 user=root fd=7u ip_version=6 dvc_id=93241 transport=TCP


_raw: Mon Oct 20 17:16:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76502 user=root fd=6u ip_version=4 dvc_id=93231 transport=TCP


_raw: Mon Oct 20 17:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76401 user=root fd=7u ip_version=4 dvc_id=91147 transport=UDP


_raw: Mon Oct 20 17:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2691 transport=UDP


_raw: Mon Oct 20 17:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2674 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Mon Oct 20 17:16:11 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79576 user=root fd=13u ip_version=4 dvc_id=98713 transport=TCP


_raw: Mon Oct 20 17:16:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77747 user=xrdp fd=11u ip_version=6 dvc_id=95560 transport=TCP


_raw: Mon Oct 20 17:16:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76510 user=root fd=7u ip_version=6 dvc_id=90522 transport=TCP


_raw: Mon Oct 20 17:16:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76510 user=root fd=6u ip_version=4 dvc_id=90512 transport=TCP


_raw: Mon Oct 20 17:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76409 user=root fd=7u ip_version=4 dvc_id=91350 transport=UDP


_raw: Mon Oct 20 17:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=730 transport=UDP


_raw: Mon Oct 20 17:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3874 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Mon Oct 20 17:12:39 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79744 user=root fd=13u ip_version=4 dvc_id=98978 transport=TCP


_raw: Mon Oct 20 17:12:39 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77823 user=xrdp fd=11u ip_version=6 dvc_id=94687 transport=TCP


_raw: Mon Oct 20 17:12:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76585 user=root fd=7u ip_version=6 dvc_id=89768 transport=TCP


_raw: Mon Oct 20 17:12:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76585 user=root fd=6u ip_version=4 dvc_id=89758 transport=TCP


_raw: Mon Oct 20 17:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76484 user=root fd=7u ip_version=4 dvc_id=90467 transport=UDP


_raw: Mon Oct 20 17:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=739 transport=UDP


_raw: Mon Oct 20 17:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1592 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Mon Oct 20 16:17:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77779 user=xrdp fd=11u ip_version=6 dvc_id=94828 transport=TCP


_raw: Mon Oct 20 16:17:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76540 user=root fd=7u ip_version=6 dvc_id=90889 transport=TCP


_raw: Mon Oct 20 16:17:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76540 user=root fd=6u ip_version=4 dvc_id=90887 transport=TCP


_raw: Mon Oct 20 16:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76435 user=root fd=7u ip_version=4 dvc_id=89970 transport=UDP


_raw: Mon Oct 20 16:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4144 transport=UDP


_raw: Mon Oct 20 16:17:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=422 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Mon Oct 20 16:17:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78082 user=xrdp fd=11u ip_version=6 dvc_id=95621 transport=TCP


_raw: Mon Oct 20 16:17:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76825 user=root fd=7u ip_version=6 dvc_id=89737 transport=TCP


_raw: Mon Oct 20 16:17:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76825 user=root fd=6u ip_version=4 dvc_id=89727 transport=TCP


_raw: Mon Oct 20 16:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76724 user=root fd=7u ip_version=4 dvc_id=88561 transport=UDP


_raw: Mon Oct 20 16:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw: Mon Oct 20 16:17:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=3590 transport=UDP


_raw: Mon Oct 20 16:17:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77759 user=xrdp fd=11u ip_version=6 dvc_id=95464 transport=TCP


_raw: Mon Oct 20 16:17:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76515 user=root fd=7u ip_version=6 dvc_id=91549 transport=TCP


_raw: Mon Oct 20 16:17:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76515 user=root fd=6u ip_version=4 dvc_id=91547 transport=TCP


_raw: Mon Oct 20 16:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76414 user=root fd=7u ip_version=4 dvc_id=89012 transport=UDP


_raw: Mon Oct 20 16:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=3512 transport=UDP


_raw: Mon Oct 20 16:17:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=3491 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Mon Oct 20 16:16:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77745 user=xrdp fd=11u ip_version=6 dvc_id=95375 transport=TCP


_raw: Mon Oct 20 16:16:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76502 user=root fd=7u ip_version=6 dvc_id=93241 transport=TCP


_raw: Mon Oct 20 16:16:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76502 user=root fd=6u ip_version=4 dvc_id=93231 transport=TCP


_raw: Mon Oct 20 16:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76401 user=root fd=7u ip_version=4 dvc_id=91147 transport=UDP


_raw: Mon Oct 20 16:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2691 transport=UDP


_raw: Mon Oct 20 16:16:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2674 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Mon Oct 20 16:16:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77747 user=xrdp fd=11u ip_version=6 dvc_id=95560 transport=TCP


_raw: Mon Oct 20 16:16:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76510 user=root fd=7u ip_version=6 dvc_id=90522 transport=TCP


_raw: Mon Oct 20 16:16:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76510 user=root fd=6u ip_version=4 dvc_id=90512 transport=TCP


_raw: Mon Oct 20 16:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76409 user=root fd=7u ip_version=4 dvc_id=91350 transport=UDP


_raw: Mon Oct 20 16:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=730 transport=UDP


_raw: Mon Oct 20 16:16:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3874 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw: Mon Oct 20 16:12:39 EDT 2025 file_hash=SHA2-256(stdin)= 4a1596ec245ef43cadb5be210be24eeda6c70fcee2a0dcdbd24a3d5dbe079414


_raw: Mon Oct 20 16:12:39 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77823 user=xrdp fd=11u ip_version=6 dvc_id=94687 transport=TCP


_raw: Mon Oct 20 16:12:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76585 user=root fd=7u ip_version=6 dvc_id=89768 transport=TCP


_raw: Mon Oct 20 16:12:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76585 user=root fd=6u ip_version=4 dvc_id=89758 transport=TCP


_raw: Mon Oct 20 16:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76484 user=root fd=7u ip_version=4 dvc_id=90467 transport=UDP


_raw: Mon Oct 20 16:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=739 transport=UDP


_raw: Mon Oct 20 16:12:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1592 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Mon Oct 20 15:03:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78153 user=xrdp fd=11u ip_version=6 dvc_id=96399 transport=TCP


_raw: Mon Oct 20 15:03:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76899 user=root fd=7u ip_version=6 dvc_id=92468 transport=TCP


_raw: Mon Oct 20 15:03:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76899 user=root fd=6u ip_version=4 dvc_id=92458 transport=TCP


_raw: Mon Oct 20 15:03:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76798 user=root fd=7u ip_version=4 dvc_id=90860 transport=UDP


_raw: Mon Oct 20 15:03:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=707 user=root fd=7u ip_version=4 dvc_id=923 transport=UDP


_raw: Mon Oct 20 15:03:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=2548 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Mon Oct 20 15:00:35 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77729 user=xrdp fd=11u ip_version=6 dvc_id=94873 transport=TCP


_raw: Mon Oct 20 15:00:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76489 user=root fd=7u ip_version=6 dvc_id=89052 transport=TCP


_raw: Mon Oct 20 15:00:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76489 user=root fd=6u ip_version=4 dvc_id=89050 transport=TCP


_raw: Mon Oct 20 15:00:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76388 user=root fd=7u ip_version=4 dvc_id=89007 transport=UDP


_raw: Mon Oct 20 15:00:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=2687 transport=UDP


_raw: Mon Oct 20 15:00:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=3964 transport=UDP


_raw: Mon Oct 20 15:00:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77717 user=xrdp fd=11u ip_version=6 dvc_id=96334 transport=TCP


_raw: Mon Oct 20 15:00:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76479 user=root fd=7u ip_version=6 dvc_id=88050 transport=TCP


_raw: Mon Oct 20 15:00:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76479 user=root fd=6u ip_version=4 dvc_id=88048 transport=TCP


_raw: Mon Oct 20 15:00:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76378 user=root fd=7u ip_version=4 dvc_id=87962 transport=UDP


_raw: Mon Oct 20 15:00:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3800 transport=UDP


_raw: Mon Oct 20 15:00:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=1652 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Mon Oct 20 14:59:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77867 user=xrdp fd=11u ip_version=6 dvc_id=92898 transport=TCP


_raw: Mon Oct 20 14:59:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=7u ip_version=6 dvc_id=91158 transport=TCP


_raw: Mon Oct 20 14:59:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=6u ip_version=4 dvc_id=91156 transport=TCP


_raw: Mon Oct 20 14:59:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76523 user=root fd=7u ip_version=4 dvc_id=89058 transport=UDP


_raw: Mon Oct 20 14:59:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=1703 transport=UDP


_raw: Mon Oct 20 14:59:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=657 transport=UDP


_raw: Mon Oct 20 14:57:37 EDT 2025 file_hash=SHA2-256(stdin)= 2fdde08d37491d0ee317063ae02f9be7f727bfa4eaec13c3cf89febd2f2a1e4b


_raw: Mon Oct 20 14:57:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77761 user=xrdp fd=11u ip_version=6 dvc_id=93819 transport=TCP


_raw: Mon Oct 20 14:57:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76518 user=root fd=7u ip_version=6 dvc_id=89000 transport=TCP


_raw: Mon Oct 20 14:57:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76518 user=root fd=6u ip_version=4 dvc_id=88990 transport=TCP


_raw: Mon Oct 20 14:57:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76417 user=root fd=7u ip_version=4 dvc_id=88924 transport=UDP


_raw: Mon Oct 20 14:57:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=824 transport=UDP


_raw: Mon Oct 20 14:57:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=804 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Mon Oct 20 14:56:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77851 user=xrdp fd=11u ip_version=6 dvc_id=92941 transport=TCP


_raw: Mon Oct 20 14:56:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76609 user=root fd=7u ip_version=6 dvc_id=87966 transport=TCP


_raw: Mon Oct 20 14:56:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76609 user=root fd=6u ip_version=4 dvc_id=87956 transport=TCP


_raw: Mon Oct 20 14:56:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76508 user=root fd=7u ip_version=4 dvc_id=89989 transport=UDP


_raw: Mon Oct 20 14:56:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=4318 transport=UDP


_raw: Mon Oct 20 14:56:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=4302 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     5432
tcp     8889
tcp       22
tcp     5432
tcp     7474
tcp     3389
tcp     7687
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    40819
tcp       22
tcp     8889
tcp     5432
tcp       22
tcp     3350
tcp     5432
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp    42241
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    37503
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     3350
tcp     3389
tcp       22
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp      636
tcp     3350
tcp     1433
tcp    46604
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     5432
tcp       22
tcp     3350
tcp     3389
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp       53
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    42119
tcp     8889
tcp     1337
tcp       22
tcp     3350
tcp       22
tcp    38361
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    35253
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp     8001
tcp     5432
tcp     8889
tcp       22
tcp     8000
tcp     8001
tcp     3389
tcp     3350
tcp     5432
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    43897
udp       68
tcp     8889
tcp       22
tcp       80
tcp      443
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     5432
tcp     5432
tcp       22
tcp     3350
tcp     7687
tcp     3389
tcp     7474


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    35879


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     9691
tcp     8889
tcp     8001
tcp     8000
tcp     8080
tcp       22
tcp     5432
tcp     9691
tcp     3350
tcp     3389
tcp     8001
tcp     8000
tcp     8080


_raw:
Proto   Port
udp    38561
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp    37169
tcp       22
tcp    43409
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp    34067
tcp       22
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     5432
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp       22


_raw:
Proto   Port
udp     5353
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     4444
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       80
tcp     8889
tcp       22
tcp     5432
tcp     9392
tcp     1883
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       53
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw:
Proto   Port
udp    46580
udp    42520
udp    48234
udp    48542
udp    48895
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    48459
udp       68
udp       68
udp       68
udp    38915
tcp     8081
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp     8080
tcp       22
tcp    33349


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     5432
tcp       22
tcp     8889
tcp     5432
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp    44779
tcp     8889
tcp       22
tcp       80
tcp      443
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 18:56:01 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=730693 user=root fd=13u ip_version=4 dvc_id=863639 transport=TCP


_raw: Sat Oct 18 18:56:01 EDT 2025 app=python3 dest_ip=* dest_port=8000 pid=719139 user=root fd=3u ip_version=4 dvc_id=839501 transport=TCP


_raw: Sat Oct 18 18:56:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=94104 transport=TCP


_raw: Sat Oct 18 18:56:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=7u ip_version=6 dvc_id=90403 transport=TCP


_raw: Sat Oct 18 18:56:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=6u ip_version=4 dvc_id=90401 transport=TCP


_raw: Sat Oct 18 18:56:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=93226 transport=UDP


_raw: Sat Oct 18 18:56:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2720 transport=UDP


_raw: Sat Oct 18 18:56:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4056 transport=UDP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=python dest_ip=* dest_port=8000 pid=803391 user=pentester fd=3u ip_version=4 dvc_id=1459567 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=759861 user=_gvm fd=4u ip_version=4 dvc_id=1082657 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=759856 user=_gvm fd=4u ip_version=4 dvc_id=1082097 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=758907 user=root fd=13u ip_version=4 dvc_id=1079742 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=728784 user=mosquitto fd=5u ip_version=4 dvc_id=873749 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=726857 user=postgres fd=7u ip_version=4 dvc_id=865780 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=714979 user=pentester fd=80u ip_version=4 dvc_id=4283440 transport=UDP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=714924 user=pentester fd=171u ip_version=4 dvc_id=841877 transport=UDP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=chromium dest_ip=10.0.254.204 dest_port=59548 pid=714924 user=pentester fd=144u ip_version=4 dvc_id=4995651 transport=UDP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78373 user=xrdp fd=11u ip_version=6 dvc_id=97483 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=7u ip_version=6 dvc_id=90815 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=6u ip_version=4 dvc_id=90813 transport=TCP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77028 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw: Sat Oct 18 18:55:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4395 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
udp     5353
tcp       22
tcp     9392
tcp     8000
tcp     5432
tcp     1883
tcp       80
tcp     8889
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=38625 pid=792165 user=root fd=15u ip_version=6 dvc_id=1022679 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=59384 pid=792165 user=root fd=14u ip_version=6 dvc_id=1022675 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=44279 pid=792165 user=root fd=13u ip_version=4 dvc_id=1022671 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=55547 pid=792165 user=root fd=12u ip_version=4 dvc_id=1022667 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=40129 pid=792165 user=root fd=11u ip_version=6 dvc_id=1022663 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=38246 pid=792165 user=root fd=10u ip_version=6 dvc_id=1022659 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=47649 pid=792165 user=root fd=9u ip_version=4 dvc_id=1022655 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=48509 pid=792165 user=root fd=8u ip_version=4 dvc_id=1022651 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=50461 pid=792165 user=root fd=7u ip_version=6 dvc_id=1022647 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=32818 pid=792165 user=root fd=6u ip_version=6 dvc_id=1022643 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=43441 pid=792165 user=root fd=5u ip_version=4 dvc_id=1022639 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.mountd dest_ip=* dest_port=54115 pid=792165 user=root fd=4u ip_version=4 dvc_id=1022635 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.statd dest_ip=* dest_port=44235 pid=792157 user=statd fd=11u ip_version=6 dvc_id=1020649 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.statd dest_ip=* dest_port=49646 pid=792157 user=statd fd=10u ip_version=6 dvc_id=1020645 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.statd dest_ip=* dest_port=41387 pid=792157 user=statd fd=9u ip_version=4 dvc_id=1020641 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.statd dest_ip=* dest_port=53664 pid=792157 user=statd fd=8u ip_version=4 dvc_id=1020637 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpc.statd dest_ip=127.0.0.1 dest_port=725 pid=792157 user=statd fd=5u ip_version=4 dvc_id=1023497 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpcbind dest_ip=* dest_port=111 pid=792152 user=_rpc fd=7u ip_version=6 dvc_id=1022593 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpcbind dest_ip=* dest_port=111 pid=792152 user=_rpc fd=6u ip_version=6 dvc_id=1021661 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpcbind dest_ip=* dest_port=111 pid=792152 user=_rpc fd=5u ip_version=4 dvc_id=1020577 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=rpcbind dest_ip=* dest_port=111 pid=792152 user=_rpc fd=4u ip_version=4 dvc_id=1022591 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740222 user=root fd=13u ip_version=4 dvc_id=918862 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77943 user=xrdp fd=11u ip_version=6 dvc_id=94970 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=7u ip_version=6 dvc_id=89964 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=6u ip_version=4 dvc_id=89962 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92185 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2521 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3717 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=systemd dest_ip=* dest_port=111 pid=1 user=root fd=297u ip_version=6 dvc_id=1022593 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=systemd dest_ip=* dest_port=111 pid=1 user=root fd=292u ip_version=6 dvc_id=1021661 transport=TCP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=systemd dest_ip=* dest_port=111 pid=1 user=root fd=291u ip_version=4 dvc_id=1020577 transport=UDP


_raw: Sat Oct 18 18:55:47 EDT 2025 app=systemd dest_ip=* dest_port=111 pid=1 user=root fd=290u ip_version=4 dvc_id=1022591 transport=TCP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 18:55:46 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=795910 user=pentester fd=37u ip_version=6 dvc_id=1195190 transport=TCP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=46169 pid=795910 user=pentester fd=16u ip_version=6 dvc_id=1192462 transport=TCP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734821 user=root fd=13u ip_version=4 dvc_id=917560 transport=TCP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=712800 user=pentester fd=222u ip_version=4 dvc_id=847249 transport=UDP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77995 user=xrdp fd=11u ip_version=6 dvc_id=95567 transport=TCP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=7u ip_version=6 dvc_id=91643 transport=TCP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=6u ip_version=4 dvc_id=91641 transport=TCP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76623 user=root fd=7u ip_version=4 dvc_id=89678 transport=UDP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3662 transport=UDP


_raw: Sat Oct 18 18:55:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=580 transport=UDP


_raw:
Proto   Port
udp     5353
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    46169
tcp     3389
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw: Sat Oct 18 18:55:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739441 user=root fd=13u ip_version=4 dvc_id=965766 transport=TCP


_raw: Sat Oct 18 18:55:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95973 transport=TCP


_raw: Sat Oct 18 18:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=7u ip_version=6 dvc_id=89832 transport=TCP


_raw: Sat Oct 18 18:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=6u ip_version=4 dvc_id=89830 transport=TCP


_raw: Sat Oct 18 18:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=89004 transport=UDP


_raw: Sat Oct 18 18:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4122 transport=UDP


_raw: Sat Oct 18 18:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=1765 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    42027
tcp     8080
tcp     3350
tcp       22


_raw: Sat Oct 18 18:55:34 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=752176 user=pentester fd=37u ip_version=6 dvc_id=1010963 transport=TCP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42027 pid=752176 user=pentester fd=16u ip_version=6 dvc_id=1010914 transport=TCP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=736615 user=root fd=13u ip_version=4 dvc_id=946624 transport=TCP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78024 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=90581 transport=TCP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=90579 transport=TCP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76650 user=root fd=7u ip_version=4 dvc_id=91431 transport=UDP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3563 transport=UDP


_raw: Sat Oct 18 18:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4254 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp    38469
tcp       22
tcp     8889
tcp    37233
tcp       22
tcp     3389
tcp     8080
tcp     3350


_raw: Sat Oct 18 18:55:26 EDT 2025 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=770775 user=_bloodhound fd=8u ip_version=4 dvc_id=996207 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=bhapi dest_ip=* dest_port=2112 pid=770775 user=_bloodhound fd=6u ip_version=6 dvc_id=998727 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=769520 user=root fd=282u ip_version=6 dvc_id=994157 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=769520 user=root fd=281u ip_version=6 dvc_id=992167 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=769429 user=postgres fd=7u ip_version=4 dvc_id=992062 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=34683 pid=767713 user=pentester fd=183u ip_version=4 dvc_id=1114607 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=53387 pid=767713 user=pentester fd=167u ip_version=4 dvc_id=1116239 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=45976 pid=767713 user=pentester fd=166u ip_version=4 dvc_id=1116238 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=58726 pid=767713 user=pentester fd=164u ip_version=4 dvc_id=1116237 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=36331 pid=767713 user=pentester fd=156u ip_version=4 dvc_id=1117277 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=39135 pid=767713 user=pentester fd=153u ip_version=4 dvc_id=1117260 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=59143 pid=767713 user=pentester fd=150u ip_version=4 dvc_id=1117261 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=43314 pid=767713 user=pentester fd=149u ip_version=4 dvc_id=1114370 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=59899 pid=767713 user=pentester fd=148u ip_version=4 dvc_id=1116222 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=53896 pid=767713 user=pentester fd=144u ip_version=4 dvc_id=1114365 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=39171 pid=767713 user=pentester fd=121u ip_version=4 dvc_id=1117257 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=60246 pid=767713 user=pentester fd=120u ip_version=4 dvc_id=1117256 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=56438 pid=767713 user=pentester fd=109u ip_version=4 dvc_id=1117255 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=33550 pid=767713 user=pentester fd=94u ip_version=4 dvc_id=1117254 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=36087 pid=767713 user=pentester fd=59u ip_version=4 dvc_id=1113077 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=743430 user=root fd=13u ip_version=4 dvc_id=921129 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77898 user=xrdp fd=11u ip_version=6 dvc_id=96358 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=89751 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=89749 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91447 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=698 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=38469 pid=945086 user=pentester fd=40u ip_version=4 dvc_id=1256707 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=936949 user=pentester fd=37u ip_version=6 dvc_id=1179978 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37233 pid=936949 user=pentester fd=16u ip_version=6 dvc_id=1173696 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741055 user=root fd=13u ip_version=4 dvc_id=952147 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77901 user=xrdp fd=11u ip_version=6 dvc_id=96589 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4147 transport=UDP


_raw: Sat Oct 18 18:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=4132 transport=UDP


_raw: Sat Oct 18 18:55:04 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734375 user=root fd=13u ip_version=4 dvc_id=891420 transport=TCP


_raw: Sat Oct 18 18:55:04 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=96590 transport=TCP


_raw: Sat Oct 18 18:55:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 18:55:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=89926 transport=TCP


_raw: Sat Oct 18 18:55:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89895 transport=UDP


_raw: Sat Oct 18 18:55:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=548 transport=UDP


_raw: Sat Oct 18 18:55:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=528 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     5432
tcp     8889
tcp       22
tcp     5432
tcp     7474
tcp     3389
tcp     7687
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp       22
tcp     3350
tcp     5432
tcp     3389


_raw: Sat Oct 18 18:55:01 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=810552 user=root fd=282u ip_version=6 dvc_id=1176124 transport=TCP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=810552 user=root fd=281u ip_version=6 dvc_id=1173454 transport=TCP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=810418 user=postgres fd=7u ip_version=4 dvc_id=1171428 transport=TCP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739479 user=root fd=13u ip_version=4 dvc_id=920603 transport=TCP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77990 user=xrdp fd=11u ip_version=6 dvc_id=94139 transport=TCP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=7u ip_version=6 dvc_id=90611 transport=TCP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=6u ip_version=4 dvc_id=90609 transport=TCP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76632 user=root fd=7u ip_version=4 dvc_id=91722 transport=UDP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3611 transport=UDP


_raw: Sat Oct 18 18:55:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4119 transport=UDP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734705 user=root fd=13u ip_version=4 dvc_id=866063 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78131 user=xrdp fd=11u ip_version=6 dvc_id=94741 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=7u ip_version=6 dvc_id=93230 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=6u ip_version=4 dvc_id=93220 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76773 user=root fd=7u ip_version=4 dvc_id=91380 transport=UDP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1578 transport=UDP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=2581 transport=UDP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=737839 user=root fd=13u ip_version=4 dvc_id=933817 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=719346 user=postgres fd=7u ip_version=4 dvc_id=860770 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=firefox-esr dest_ip=* dest_port=50350 pid=711712 user=pentester fd=131u ip_version=4 dvc_id=1269761 transport=UDP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94054 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=88024 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=88014 transport=TCP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=89082 transport=UDP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=479 transport=UDP


_raw: Sat Oct 18 18:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4293 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 18:54:55 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=902086 user=pentester fd=37u ip_version=6 dvc_id=2038665 transport=TCP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42241 pid=902086 user=pentester fd=16u ip_version=6 dvc_id=2037353 transport=TCP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=836960 user=root fd=13u ip_version=4 dvc_id=1559885 transport=TCP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77875 user=xrdp fd=11u ip_version=6 dvc_id=95421 transport=TCP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=92233 transport=TCP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=92231 transport=TCP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89956 transport=UDP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4174 transport=UDP


_raw: Sat Oct 18 18:54:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2684 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp    42241
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 18:54:54 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=745548 user=root fd=13u ip_version=4 dvc_id=933412 transport=TCP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=724089 user=root fd=7u ip_version=4 dvc_id=858198 transport=TCP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=723494 user=root fd=7u ip_version=4 dvc_id=856704 transport=TCP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=723487 user=root fd=7u ip_version=4 dvc_id=854485 transport=TCP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77933 user=xrdp fd=11u ip_version=6 dvc_id=91076 transport=TCP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=7u ip_version=6 dvc_id=92457 transport=TCP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=6u ip_version=4 dvc_id=92455 transport=TCP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76557 user=root fd=7u ip_version=4 dvc_id=90399 transport=UDP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 18:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=5193 transport=UDP


_raw: Sat Oct 18 18:54:48 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=748534 user=root fd=13u ip_version=4 dvc_id=1050270 transport=TCP


_raw: Sat Oct 18 18:54:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94680 transport=TCP


_raw: Sat Oct 18 18:54:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=7u ip_version=6 dvc_id=92245 transport=TCP


_raw: Sat Oct 18 18:54:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=6u ip_version=4 dvc_id=92243 transport=TCP


_raw: Sat Oct 18 18:54:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=92206 transport=UDP


_raw: Sat Oct 18 18:54:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4269 transport=UDP


_raw: Sat Oct 18 18:54:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=625 user=root fd=7u ip_version=4 dvc_id=2801 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw: Sat Oct 18 18:54:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=778093 user=pentester fd=37u ip_version=6 dvc_id=1092285 transport=TCP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37503 pid=778093 user=pentester fd=16u ip_version=6 dvc_id=1091435 transport=TCP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=737278 user=root fd=13u ip_version=4 dvc_id=964662 transport=TCP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77918 user=xrdp fd=11u ip_version=6 dvc_id=96359 transport=TCP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=7u ip_version=6 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=6u ip_version=4 dvc_id=90617 transport=TCP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76562 user=root fd=7u ip_version=4 dvc_id=91321 transport=UDP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=711 transport=UDP


_raw: Sat Oct 18 18:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1626 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    37503
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 18:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=749574 user=pentester fd=37u ip_version=6 dvc_id=980488 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=40281 pid=749574 user=pentester fd=16u ip_version=6 dvc_id=981338 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=732132 user=root fd=13u ip_version=4 dvc_id=882726 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78045 user=xrdp fd=11u ip_version=6 dvc_id=95486 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=7u ip_version=6 dvc_id=91616 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=6u ip_version=4 dvc_id=91614 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76670 user=root fd=7u ip_version=4 dvc_id=91533 transport=UDP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp    40281
tcp     8080
tcp       22


_raw: Sat Oct 18 18:54:20 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=745554 user=root fd=13u ip_version=4 dvc_id=1184646 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78160 user=xrdp fd=11u ip_version=6 dvc_id=94017 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=7u ip_version=6 dvc_id=91328 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=6u ip_version=4 dvc_id=91326 transport=TCP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76805 user=root fd=7u ip_version=4 dvc_id=92243 transport=UDP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4112 transport=UDP


_raw: Sat Oct 18 18:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1973 transport=UDP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=40764 user=root fd=13u ip_version=4 dvc_id=326817 transport=TCP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=9836 user=pentester fd=37u ip_version=6 dvc_id=65446 transport=TCP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38057 pid=9836 user=pentester fd=16u ip_version=6 dvc_id=63384 transport=TCP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=940 user=xrdp fd=11u ip_version=6 dvc_id=824 transport=TCP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=7u ip_version=6 dvc_id=4605 transport=TCP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=6u ip_version=4 dvc_id=4603 transport=TCP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=39763 pid=892 user=root fd=9u ip_version=4 dvc_id=4661 transport=TCP


_raw: Sat Oct 18 18:54:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=664 user=root fd=7u ip_version=4 dvc_id=3825 transport=UDP


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Sat Oct 18 18:54:00 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=742533 user=postgres fd=7u ip_version=4 dvc_id=1011239 transport=TCP


_raw: Sat Oct 18 18:54:00 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739806 user=root fd=13u ip_version=4 dvc_id=997743 transport=TCP


_raw: Sat Oct 18 18:54:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78178 user=xrdp fd=11u ip_version=6 dvc_id=94976 transport=TCP


_raw: Sat Oct 18 18:54:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=7u ip_version=6 dvc_id=89067 transport=TCP


_raw: Sat Oct 18 18:54:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=6u ip_version=4 dvc_id=89065 transport=TCP


_raw: Sat Oct 18 18:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76817 user=root fd=7u ip_version=4 dvc_id=89871 transport=UDP


_raw: Sat Oct 18 18:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=664 transport=UDP


_raw: Sat Oct 18 18:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     3350
tcp     3389
tcp       22
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp      636
tcp     3350
tcp     1433
tcp    46604
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw: Sat Oct 18 18:53:43 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=800603 user=postgres fd=7u ip_version=4 dvc_id=1069934 transport=TCP


_raw: Sat Oct 18 18:53:43 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=757169 user=root fd=13u ip_version=4 dvc_id=944015 transport=TCP


_raw: Sat Oct 18 18:53:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77957 user=xrdp fd=11u ip_version=6 dvc_id=94678 transport=TCP


_raw: Sat Oct 18 18:53:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=7u ip_version=6 dvc_id=93212 transport=TCP


_raw: Sat Oct 18 18:53:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=6u ip_version=4 dvc_id=93210 transport=TCP


_raw: Sat Oct 18 18:53:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76597 user=root fd=7u ip_version=4 dvc_id=90691 transport=UDP


_raw: Sat Oct 18 18:53:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3591 transport=UDP


_raw: Sat Oct 18 18:53:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1780 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     5432
tcp       22
tcp     3350
tcp     3389
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 18:53:36 EDT 2025 file_hash=SHA2-256(stdin)= dec083952d4ff3b56b5cc2ad7540ea6cc3be36c8f4a9bb3146aade72ac69acde


_raw: Sat Oct 18 18:53:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741489 user=root fd=13u ip_version=4 dvc_id=976746 transport=TCP


_raw: Sat Oct 18 18:53:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77961 user=xrdp fd=11u ip_version=6 dvc_id=93129 transport=TCP


_raw: Sat Oct 18 18:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=7u ip_version=6 dvc_id=91091 transport=TCP


_raw: Sat Oct 18 18:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=6u ip_version=4 dvc_id=91089 transport=TCP


_raw: Sat Oct 18 18:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76599 user=root fd=7u ip_version=4 dvc_id=91751 transport=UDP


_raw: Sat Oct 18 18:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3650 transport=UDP


_raw: Sat Oct 18 18:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=551 transport=UDP


_raw: Sat Oct 18 18:53:32 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741654 user=root fd=13u ip_version=4 dvc_id=945661 transport=TCP


_raw: Sat Oct 18 18:53:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77794 user=xrdp fd=11u ip_version=6 dvc_id=92156 transport=TCP


_raw: Sat Oct 18 18:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 18:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 18:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76404 user=root fd=7u ip_version=4 dvc_id=89912 transport=UDP


_raw: Sat Oct 18 18:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=905 transport=UDP


_raw: Sat Oct 18 18:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4175 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 18:53:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=731379 user=root fd=13u ip_version=4 dvc_id=856269 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=94192 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=90439 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=90437 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76516 user=root fd=7u ip_version=4 dvc_id=91289 transport=UDP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=894 transport=UDP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1770 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw: Sat Oct 18 18:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=52760 pid=748899 user=pentester fd=233u ip_version=4 dvc_id=2621692 transport=UDP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=49419 pid=748899 user=pentester fd=165u ip_version=4 dvc_id=2620117 transport=UDP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740329 user=root fd=13u ip_version=4 dvc_id=975927 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78253 user=xrdp fd=11u ip_version=6 dvc_id=94909 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=7u ip_version=6 dvc_id=89930 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=6u ip_version=4 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76890 user=root fd=7u ip_version=4 dvc_id=89862 transport=UDP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3570 transport=UDP


_raw: Sat Oct 18 18:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=3067 transport=UDP


_raw:
Proto   Port
udp    52760
udp       68
udp       68
udp       68
udp    49419
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 18:53:27 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=753678 user=root fd=13u ip_version=4 dvc_id=982545 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=735279 user=_gvm fd=4u ip_version=4 dvc_id=925447 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=735276 user=_gvm fd=4u ip_version=4 dvc_id=925925 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=715682 user=postgres fd=7u ip_version=4 dvc_id=838335 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=715667 user=mosquitto fd=5u ip_version=4 dvc_id=836029 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78006 user=xrdp fd=11u ip_version=6 dvc_id=94671 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=7u ip_version=6 dvc_id=91660 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=6u ip_version=4 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76666 user=root fd=7u ip_version=4 dvc_id=92296 transport=UDP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=2635 transport=UDP


_raw: Sat Oct 18 18:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2620 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=885174 user=root fd=36u ip_version=6 dvc_id=1930803 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=885174 user=root fd=35u ip_version=6 dvc_id=1932853 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=885174 user=root fd=34u ip_version=6 dvc_id=1930802 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=885174 user=root fd=33u ip_version=6 dvc_id=1932852 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=885174 user=root fd=32u ip_version=4 dvc_id=1931601 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=885174 user=root fd=31u ip_version=6 dvc_id=1929986 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=885174 user=root fd=30u ip_version=6 dvc_id=1932850 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=885174 user=root fd=29u ip_version=6 dvc_id=1932849 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=885174 user=root fd=28u ip_version=6 dvc_id=1932848 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=885174 user=root fd=27u ip_version=6 dvc_id=1932847 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=885174 user=root fd=26u ip_version=6 dvc_id=1929985 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=885174 user=root fd=25u ip_version=6 dvc_id=1929984 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=885174 user=root fd=24u ip_version=6 dvc_id=1929983 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=885174 user=root fd=23u ip_version=6 dvc_id=1932846 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=885174 user=root fd=22u ip_version=6 dvc_id=1932845 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=885174 user=root fd=21u ip_version=6 dvc_id=1932844 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=885174 user=root fd=20u ip_version=6 dvc_id=1929982 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=885174 user=root fd=19u ip_version=6 dvc_id=1929981 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=885174 user=root fd=18u ip_version=6 dvc_id=1932851 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=885174 user=root fd=14u ip_version=6 dvc_id=1931598 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=885174 user=root fd=13u ip_version=6 dvc_id=1930801 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=46604 pid=885174 user=root fd=12u ip_version=6 dvc_id=1930800 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=885174 user=root fd=11u ip_version=6 dvc_id=1932843 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=885174 user=root fd=10u ip_version=6 dvc_id=1930798 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=885174 user=root fd=9u ip_version=6 dvc_id=1932842 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=885174 user=root fd=8u ip_version=6 dvc_id=1929979 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=885174 user=root fd=7u ip_version=6 dvc_id=1930797 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=885174 user=root fd=6u ip_version=6 dvc_id=1932840 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=802723 user=root fd=7u ip_version=4 dvc_id=1539587 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=802214 user=root fd=7u ip_version=4 dvc_id=1536663 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=802208 user=root fd=7u ip_version=4 dvc_id=1536638 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=765049 user=root fd=13u ip_version=4 dvc_id=1276759 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96478 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=7u ip_version=6 dvc_id=92354 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=6u ip_version=4 dvc_id=92352 transport=TCP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76679 user=root fd=7u ip_version=4 dvc_id=90433 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4163 transport=UDP


_raw: Sat Oct 18 18:53:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=820 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp       53
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     1337
tcp       22
tcp     3350
tcp       22
tcp    38361
tcp     3389
tcp     8080


_raw: Sat Oct 18 18:53:02 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739561 user=root fd=13u ip_version=4 dvc_id=939368 transport=TCP


_raw: Sat Oct 18 18:53:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77950 user=xrdp fd=11u ip_version=6 dvc_id=93072 transport=TCP


_raw: Sat Oct 18 18:53:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=90669 transport=TCP


_raw: Sat Oct 18 18:53:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=90667 transport=TCP


_raw: Sat Oct 18 18:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90586 transport=UDP


_raw: Sat Oct 18 18:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3765 transport=UDP


_raw: Sat Oct 18 18:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=1720 transport=UDP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=python3 dest_ip=* dest_port=1337 pid=824880 user=pentester fd=3u ip_version=4 dvc_id=1623002 transport=TCP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=780525 user=pentester fd=37u ip_version=6 dvc_id=1245643 transport=TCP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38361 pid=780525 user=pentester fd=16u ip_version=6 dvc_id=1243231 transport=TCP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=749474 user=root fd=13u ip_version=4 dvc_id=1089100 transport=TCP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77820 user=xrdp fd=11u ip_version=6 dvc_id=94694 transport=TCP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=7u ip_version=6 dvc_id=89688 transport=TCP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=6u ip_version=4 dvc_id=89686 transport=TCP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76467 user=root fd=7u ip_version=4 dvc_id=89631 transport=UDP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=546 transport=UDP


_raw: Sat Oct 18 18:52:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    35253
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 18:52:55 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=742049 user=root fd=13u ip_version=4 dvc_id=901990 transport=TCP


_raw: Sat Oct 18 18:52:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78193 user=xrdp fd=11u ip_version=6 dvc_id=95559 transport=TCP


_raw: Sat Oct 18 18:52:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=7u ip_version=6 dvc_id=89076 transport=TCP


_raw: Sat Oct 18 18:52:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=6u ip_version=4 dvc_id=89074 transport=TCP


_raw: Sat Oct 18 18:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76818 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 18:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3667 transport=UDP


_raw: Sat Oct 18 18:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4216 transport=UDP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=35253 pid=791023 user=pentester fd=40u ip_version=4 dvc_id=1160125 transport=TCP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=738760 user=root fd=13u ip_version=4 dvc_id=954905 transport=TCP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715926 user=pentester fd=37u ip_version=6 dvc_id=854060 transport=TCP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45661 pid=715926 user=pentester fd=16u ip_version=6 dvc_id=854051 transport=TCP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77938 user=xrdp fd=11u ip_version=6 dvc_id=96351 transport=TCP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=7u ip_version=6 dvc_id=91458 transport=TCP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=6u ip_version=4 dvc_id=91456 transport=TCP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76582 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=3573 transport=UDP


_raw: Sat Oct 18 18:52:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=5146 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp     8001
tcp     5432
tcp     8889
tcp       22
tcp     8000
tcp     8001
tcp     3389
tcp     3350
tcp     5432
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw: Sat Oct 18 18:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=794050 user=root fd=7u ip_version=6 dvc_id=1115679 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=794043 user=root fd=7u ip_version=4 dvc_id=1115678 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=793940 user=root fd=7u ip_version=6 dvc_id=1115577 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=793932 user=root fd=7u ip_version=4 dvc_id=1115576 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=793564 user=root fd=7u ip_version=6 dvc_id=1114203 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=793558 user=root fd=7u ip_version=4 dvc_id=1114202 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=789774 user=root fd=13u ip_version=4 dvc_id=1102451 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77913 user=xrdp fd=11u ip_version=6 dvc_id=93015 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=92300 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=92298 transport=TCP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76511 user=root fd=7u ip_version=4 dvc_id=88033 transport=UDP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4225 transport=UDP


_raw: Sat Oct 18 18:52:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2686 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    38307
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 18:52:46 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=775569 user=pentester fd=37u ip_version=6 dvc_id=1117732 transport=TCP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38307 pid=775569 user=pentester fd=16u ip_version=6 dvc_id=1118573 transport=TCP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=742116 user=root fd=13u ip_version=4 dvc_id=964583 transport=TCP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77752 user=xrdp fd=11u ip_version=6 dvc_id=95601 transport=TCP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=7u ip_version=6 dvc_id=88828 transport=TCP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=6u ip_version=4 dvc_id=88818 transport=TCP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76367 user=root fd=7u ip_version=4 dvc_id=89616 transport=UDP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=717 transport=UDP


_raw: Sat Oct 18 18:52:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=4035 transport=UDP


_raw:
Proto   Port
udp    38561
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp    37169
tcp       22
tcp    43409
tcp     8080
tcp     3350
tcp     3389


_raw: Sat Oct 18 18:52:40 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=25891 user=root fd=13u ip_version=4 dvc_id=103321 transport=TCP


_raw: Sat Oct 18 18:52:40 EDT 2025 app=docker-proxy dest_ip=* dest_port=443 pid=21244 user=root fd=7u ip_version=4 dvc_id=83601 transport=TCP


_raw: Sat Oct 18 18:52:40 EDT 2025 app=docker-proxy dest_ip=* dest_port=80 pid=21234 user=root fd=7u ip_version=4 dvc_id=84283 transport=TCP


_raw: Sat Oct 18 18:52:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=43897 pid=3033 user=pentester fd=216u ip_version=4 dvc_id=862599 transport=UDP


_raw: Sat Oct 18 18:52:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=43565 pid=3033 user=pentester fd=190u ip_version=4 dvc_id=870832 transport=UDP


_raw: Sat Oct 18 18:52:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=48489 pid=3033 user=pentester fd=80u ip_version=4 dvc_id=870052 transport=UDP