_raw: Sat Oct 18 12:10:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=92206 transport=UDP


_raw: Sat Oct 18 12:10:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4269 transport=UDP


_raw: Sat Oct 18 12:10:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=625 user=root fd=7u ip_version=4 dvc_id=2801 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 12:10:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77857 user=xrdp fd=11u ip_version=6 dvc_id=95552 transport=TCP


_raw: Sat Oct 18 12:10:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=7u ip_version=6 dvc_id=91239 transport=TCP


_raw: Sat Oct 18 12:10:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=6u ip_version=4 dvc_id=91237 transport=TCP


_raw: Sat Oct 18 12:10:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76482 user=root fd=7u ip_version=4 dvc_id=91145 transport=UDP


_raw: Sat Oct 18 12:10:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=1744 transport=UDP


_raw: Sat Oct 18 12:10:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=625 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     7687
tcp     7474
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:10:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77914 user=xrdp fd=11u ip_version=6 dvc_id=95597 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=91656 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=91654 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76509 user=root fd=7u ip_version=4 dvc_id=90037 transport=UDP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=5139 transport=UDP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=4199 transport=UDP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=sshd-session dest_ip=127.0.0.1 dest_port=6010 pid=701183 user=kali fd=11u ip_version=4 dvc_id=847348 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78258 user=xrdp fd=11u ip_version=6 dvc_id=94773 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76958 user=root fd=7u ip_version=6 dvc_id=93339 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76958 user=root fd=6u ip_version=4 dvc_id=93337 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76857 user=root fd=7u ip_version=4 dvc_id=89908 transport=UDP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=878 transport=UDP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=863 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     6010
tcp     6010
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:10:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=945 user=xrdp fd=11u ip_version=6 dvc_id=885 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=903 user=root fd=7u ip_version=6 dvc_id=5516 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=903 user=root fd=6u ip_version=4 dvc_id=5514 transport=TCP


_raw: Sat Oct 18 12:10:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=667 user=root fd=7u ip_version=4 dvc_id=4855 transport=UDP


_raw:
Proto   Port
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 12:10:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77974 user=xrdp fd=11u ip_version=6 dvc_id=93705 transport=TCP


_raw: Sat Oct 18 12:10:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=92193 transport=TCP


_raw: Sat Oct 18 12:10:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=92191 transport=TCP


_raw: Sat Oct 18 12:10:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=89070 transport=UDP


_raw: Sat Oct 18 12:10:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4280 transport=UDP


_raw: Sat Oct 18 12:10:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3762 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    42613
tcp    45299
tcp     8080
tcp       22
tcp     3350


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=52118 pid=712148 user=pentester fd=325u ip_version=4 dvc_id=900874 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=45880 pid=712148 user=pentester fd=321u ip_version=4 dvc_id=899990 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=51750 pid=712148 user=pentester fd=317u ip_version=4 dvc_id=899988 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=45269 pid=712148 user=pentester fd=316u ip_version=4 dvc_id=901298 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=50345 pid=712148 user=pentester fd=315u ip_version=4 dvc_id=901283 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=36163 pid=712148 user=pentester fd=312u ip_version=4 dvc_id=901280 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=33000 pid=712148 user=pentester fd=309u ip_version=4 dvc_id=901272 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=54936 pid=712148 user=pentester fd=307u ip_version=4 dvc_id=901281 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=51030 pid=712148 user=pentester fd=305u ip_version=4 dvc_id=901264 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=57086 pid=712148 user=pentester fd=304u ip_version=4 dvc_id=901263 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=37585 pid=712148 user=pentester fd=299u ip_version=4 dvc_id=899791 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=52755 pid=712148 user=pentester fd=287u ip_version=4 dvc_id=899459 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=45911 pid=712148 user=pentester fd=277u ip_version=4 dvc_id=895708 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=50878 pid=712148 user=pentester fd=275u ip_version=4 dvc_id=897625 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=60685 pid=712148 user=pentester fd=267u ip_version=4 dvc_id=900401 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=59374 pid=712148 user=pentester fd=259u ip_version=4 dvc_id=898350 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=45151 pid=712148 user=pentester fd=257u ip_version=4 dvc_id=897548 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=35783 pid=712148 user=pentester fd=255u ip_version=4 dvc_id=895088 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=44241 pid=712148 user=pentester fd=248u ip_version=4 dvc_id=895092 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=57399 pid=712148 user=pentester fd=239u ip_version=4 dvc_id=897187 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=48758 pid=712148 user=pentester fd=238u ip_version=4 dvc_id=894409 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=57672 pid=712148 user=pentester fd=235u ip_version=4 dvc_id=897175 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=35237 pid=712148 user=pentester fd=233u ip_version=4 dvc_id=897174 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=32874 pid=712148 user=pentester fd=232u ip_version=4 dvc_id=896696 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=33296 pid=712148 user=pentester fd=221u ip_version=4 dvc_id=899277 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=58510 pid=712148 user=pentester fd=218u ip_version=4 dvc_id=900365 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=53377 pid=712148 user=pentester fd=215u ip_version=4 dvc_id=895052 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=51718 pid=712148 user=pentester fd=210u ip_version=4 dvc_id=901267 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=49855 pid=712148 user=pentester fd=202u ip_version=4 dvc_id=897135 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=35972 pid=712148 user=pentester fd=192u ip_version=4 dvc_id=900364 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=58204 pid=712148 user=pentester fd=189u ip_version=4 dvc_id=893848 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=47123 pid=712148 user=pentester fd=187u ip_version=4 dvc_id=893847 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77961 user=xrdp fd=11u ip_version=6 dvc_id=93129 transport=TCP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=7u ip_version=6 dvc_id=91091 transport=TCP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=6u ip_version=4 dvc_id=91089 transport=TCP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76599 user=root fd=7u ip_version=4 dvc_id=91751 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3650 transport=UDP


_raw: Sat Oct 18 12:10:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=551 transport=UDP


_raw:
Proto   Port
udp    56489
udp       68
udp       68
udp       68
udp    45305
tcp       22
tcp     8889
tcp     3350
tcp     8080
tcp     3389
tcp    43527
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    47285
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:10:12 EDT 2025 app=x-www-browser dest_ip=* dest_port=47285 pid=713327 user=pentester fd=65u ip_version=4 dvc_id=852998 transport=UDP


_raw: Sat Oct 18 12:10:12 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95177 transport=TCP


_raw: Sat Oct 18 12:10:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=7u ip_version=6 dvc_id=92362 transport=TCP


_raw: Sat Oct 18 12:10:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=6u ip_version=4 dvc_id=92360 transport=TCP


_raw: Sat Oct 18 12:10:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76530 user=root fd=7u ip_version=4 dvc_id=91417 transport=UDP


_raw: Sat Oct 18 12:10:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=1629 transport=UDP


_raw: Sat Oct 18 12:10:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=2879 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    44251
udp       68
udp       68
udp       68
udp    45662
tcp       22
tcp     3389
tcp     3350
tcp     8080
tcp       22
tcp    33349


_raw: Sat Oct 18 12:10:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77901 user=xrdp fd=11u ip_version=6 dvc_id=96589 transport=TCP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4147 transport=UDP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=4132 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 12:10:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77944 user=xrdp fd=11u ip_version=6 dvc_id=93050 transport=TCP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76644 user=root fd=7u ip_version=6 dvc_id=91534 transport=TCP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76644 user=root fd=6u ip_version=4 dvc_id=91532 transport=TCP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76543 user=root fd=7u ip_version=4 dvc_id=92212 transport=UDP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2685 transport=UDP


_raw: Sat Oct 18 12:10:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=706370 user=pentester fd=37u ip_version=6 dvc_id=857600 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38179 pid=706370 user=pentester fd=16u ip_version=6 dvc_id=856926 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=docker-proxy dest_ip=* dest_port=443 pid=702850 user=root fd=7u ip_version=4 dvc_id=840515 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=docker-proxy dest_ip=* dest_port=80 pid=702843 user=root fd=7u ip_version=4 dvc_id=840502 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=x-www-browser dest_ip=* dest_port=46874 pid=698416 user=pentester fd=131u ip_version=4 dvc_id=1224327 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=updog dest_ip=* dest_port=9090 pid=697244 user=pentester fd=3u ip_version=4 dvc_id=812253 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77979 user=xrdp fd=11u ip_version=6 dvc_id=95549 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76654 user=root fd=7u ip_version=6 dvc_id=91537 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76654 user=root fd=6u ip_version=4 dvc_id=91527 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76553 user=root fd=7u ip_version=4 dvc_id=91009 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=707 user=root fd=7u ip_version=4 dvc_id=942 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=1660 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    46874
tcp     9090
tcp      443
tcp       22
tcp       80
tcp     3350
tcp    38179
tcp       22
tcp     8080
tcp     3389


_raw: Sat Oct 18 12:10:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=731848 user=pentester fd=37u ip_version=6 dvc_id=918351 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33349 pid=731848 user=pentester fd=16u ip_version=6 dvc_id=916401 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=firefox-esr dest_ip=* dest_port=44251 pid=715035 user=pentester fd=65u ip_version=4 dvc_id=931349 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=firefox-esr dest_ip=* dest_port=45662 pid=715035 user=pentester fd=64u ip_version=4 dvc_id=930558 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78248 user=xrdp fd=11u ip_version=6 dvc_id=97325 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77010 user=root fd=7u ip_version=6 dvc_id=92274 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77010 user=root fd=6u ip_version=4 dvc_id=92264 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76909 user=root fd=7u ip_version=4 dvc_id=89894 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2570 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=1642 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78062 user=xrdp fd=11u ip_version=6 dvc_id=96395 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=7u ip_version=6 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=6u ip_version=4 dvc_id=91656 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76616 user=root fd=7u ip_version=4 dvc_id=90856 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4271 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3860 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77794 user=xrdp fd=11u ip_version=6 dvc_id=92156 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76404 user=root fd=7u ip_version=4 dvc_id=89912 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=905 transport=UDP


_raw: Sat Oct 18 12:10:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4175 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 12:10:03 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=694384 user=postgres fd=7u ip_version=4 dvc_id=814386 transport=TCP


_raw: Sat Oct 18 12:10:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78019 user=xrdp fd=11u ip_version=6 dvc_id=92973 transport=TCP


_raw: Sat Oct 18 12:10:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=89597 transport=TCP


_raw: Sat Oct 18 12:10:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=89595 transport=TCP


_raw: Sat Oct 18 12:10:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76586 user=root fd=7u ip_version=4 dvc_id=89527 transport=UDP


_raw: Sat Oct 18 12:10:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=486 transport=UDP


_raw: Sat Oct 18 12:10:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4189 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     5432
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp    45637
tcp      636
tcp     3350
tcp     1433
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=739244 user=root fd=36u ip_version=6 dvc_id=956583 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=739244 user=root fd=35u ip_version=6 dvc_id=955237 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=739244 user=root fd=34u ip_version=6 dvc_id=956582 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=739244 user=root fd=33u ip_version=6 dvc_id=956581 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=739244 user=root fd=32u ip_version=6 dvc_id=956580 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=739244 user=root fd=31u ip_version=6 dvc_id=955236 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=739244 user=root fd=30u ip_version=6 dvc_id=955235 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=739244 user=root fd=29u ip_version=6 dvc_id=955234 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=739244 user=root fd=28u ip_version=6 dvc_id=957704 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=739244 user=root fd=27u ip_version=6 dvc_id=957703 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=739244 user=root fd=26u ip_version=6 dvc_id=955882 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=739244 user=root fd=25u ip_version=6 dvc_id=956579 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=739244 user=root fd=24u ip_version=4 dvc_id=955233 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=739244 user=root fd=23u ip_version=6 dvc_id=956577 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=739244 user=root fd=22u ip_version=6 dvc_id=955232 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=739244 user=root fd=21u ip_version=6 dvc_id=955231 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=739244 user=root fd=20u ip_version=6 dvc_id=955230 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=739244 user=root fd=19u ip_version=6 dvc_id=956578 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=739244 user=root fd=18u ip_version=6 dvc_id=955229 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=739244 user=root fd=14u ip_version=6 dvc_id=957700 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=739244 user=root fd=13u ip_version=6 dvc_id=957699 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=45637 pid=739244 user=root fd=12u ip_version=6 dvc_id=955881 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=739244 user=root fd=11u ip_version=6 dvc_id=956576 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=739244 user=root fd=10u ip_version=6 dvc_id=956574 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=739244 user=root fd=9u ip_version=6 dvc_id=955228 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=739244 user=root fd=8u ip_version=6 dvc_id=957697 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=739244 user=root fd=7u ip_version=6 dvc_id=955227 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=739244 user=root fd=6u ip_version=6 dvc_id=956572 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96478 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=7u ip_version=6 dvc_id=92354 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=6u ip_version=4 dvc_id=92352 transport=TCP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76679 user=root fd=7u ip_version=4 dvc_id=90433 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4163 transport=UDP


_raw: Sat Oct 18 12:10:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=820 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:09:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=96590 transport=TCP


_raw: Sat Oct 18 12:09:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 12:09:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=89926 transport=TCP


_raw: Sat Oct 18 12:09:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89895 transport=UDP


_raw: Sat Oct 18 12:09:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=548 transport=UDP


_raw: Sat Oct 18 12:09:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=528 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8000
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp       22
tcp     3350
tcp     5432
tcp     3389


_raw: Sat Oct 18 12:09:43 EDT 2025 app=python3 dest_ip=* dest_port=8000 pid=719139 user=root fd=3u ip_version=4 dvc_id=839501 transport=TCP


_raw: Sat Oct 18 12:09:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=94104 transport=TCP


_raw: Sat Oct 18 12:09:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=7u ip_version=6 dvc_id=90403 transport=TCP


_raw: Sat Oct 18 12:09:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=6u ip_version=4 dvc_id=90401 transport=TCP


_raw: Sat Oct 18 12:09:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=93226 transport=UDP


_raw: Sat Oct 18 12:09:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2720 transport=UDP


_raw: Sat Oct 18 12:09:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4056 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=719346 user=postgres fd=7u ip_version=4 dvc_id=860770 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94054 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=88024 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=88014 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=89082 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=479 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4293 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78262 user=xrdp fd=11u ip_version=6 dvc_id=95790 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=7u ip_version=6 dvc_id=92331 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=6u ip_version=4 dvc_id=92329 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76855 user=root fd=7u ip_version=4 dvc_id=92248 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3597 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4296 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:09:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78178 user=xrdp fd=11u ip_version=6 dvc_id=94976 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=7u ip_version=6 dvc_id=89067 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=6u ip_version=4 dvc_id=89065 transport=TCP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76817 user=root fd=7u ip_version=4 dvc_id=89871 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=664 transport=UDP


_raw: Sat Oct 18 12:09:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 12:09:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77950 user=xrdp fd=11u ip_version=6 dvc_id=93072 transport=TCP


_raw: Sat Oct 18 12:09:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=90669 transport=TCP


_raw: Sat Oct 18 12:09:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=90667 transport=TCP


_raw: Sat Oct 18 12:09:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90586 transport=UDP


_raw: Sat Oct 18 12:09:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3765 transport=UDP


_raw: Sat Oct 18 12:09:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=1720 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:09:39 EDT 2025 app=python dest_ip=* dest_port=8000 pid=732315 user=pentester fd=3u ip_version=4 dvc_id=899336 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=728992 user=_gvm fd=4u ip_version=4 dvc_id=875992 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=728987 user=_gvm fd=4u ip_version=4 dvc_id=885762 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=728784 user=mosquitto fd=5u ip_version=4 dvc_id=873749 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=726857 user=postgres fd=7u ip_version=4 dvc_id=865780 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=714924 user=pentester fd=171u ip_version=4 dvc_id=841877 transport=UDP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78373 user=xrdp fd=11u ip_version=6 dvc_id=97483 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=7u ip_version=6 dvc_id=90815 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=6u ip_version=4 dvc_id=90813 transport=TCP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77028 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw: Sat Oct 18 12:09:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4395 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     9392
tcp     8000
tcp     5432
tcp     1883
tcp       80
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     8080
tcp     3350
tcp    33791
tcp     3389


_raw:
Proto   Port
udp    38813
udp       68
udp       68
udp       68
udp    37178
tcp       22
tcp     3350
tcp    38003
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:09:33 EDT 2025 file_hash=SHA2-256(stdin)= 67e4a3f8448225d6a67ee4defc3bfdcfbbe9c758452fe76bcafdbc0703b8dcd7


_raw: Sat Oct 18 12:09:33 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726263 user=pentester fd=37u ip_version=6 dvc_id=967490 transport=TCP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38003 pid=726263 user=pentester fd=16u ip_version=6 dvc_id=965488 transport=TCP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=firefox-esr dest_ip=* dest_port=38813 pid=723862 user=pentester fd=132u ip_version=4 dvc_id=1060738 transport=UDP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=firefox-esr dest_ip=* dest_port=37178 pid=723862 user=pentester fd=114u ip_version=4 dvc_id=1060759 transport=UDP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77878 user=xrdp fd=11u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=7u ip_version=6 dvc_id=89945 transport=TCP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=6u ip_version=4 dvc_id=89943 transport=TCP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76488 user=root fd=7u ip_version=4 dvc_id=90481 transport=UDP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4267 transport=UDP


_raw: Sat Oct 18 12:09:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1011 transport=UDP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=700657 user=pentester fd=37u ip_version=6 dvc_id=844509 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33791 pid=700657 user=pentester fd=16u ip_version=6 dvc_id=844825 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78150 user=xrdp fd=11u ip_version=6 dvc_id=96510 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76703 user=root fd=7u ip_version=6 dvc_id=88041 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76703 user=root fd=6u ip_version=4 dvc_id=88039 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92402 transport=UDP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=1005 transport=UDP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1632 transport=UDP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77933 user=xrdp fd=11u ip_version=6 dvc_id=91076 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=7u ip_version=6 dvc_id=92457 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=6u ip_version=4 dvc_id=92455 transport=TCP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76557 user=root fd=7u ip_version=4 dvc_id=90399 transport=UDP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 12:09:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=5193 transport=UDP


_raw: Sat Oct 18 12:09:30 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78073 user=xrdp fd=11u ip_version=6 dvc_id=95019 transport=TCP


_raw: Sat Oct 18 12:09:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76744 user=root fd=7u ip_version=6 dvc_id=91366 transport=TCP


_raw: Sat Oct 18 12:09:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76744 user=root fd=6u ip_version=4 dvc_id=91364 transport=TCP


_raw: Sat Oct 18 12:09:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76643 user=root fd=7u ip_version=4 dvc_id=88998 transport=UDP


_raw: Sat Oct 18 12:09:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=922 transport=UDP


_raw: Sat Oct 18 12:09:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=3636 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 12:09:18 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=724652 user=pentester fd=37u ip_version=6 dvc_id=854719 transport=TCP


_raw: Sat Oct 18 12:09:18 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38441 pid=724652 user=pentester fd=34u ip_version=6 dvc_id=856554 transport=TCP


_raw: Sat Oct 18 12:09:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78065 user=xrdp fd=11u ip_version=6 dvc_id=93056 transport=TCP


_raw: Sat Oct 18 12:09:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=91036 transport=TCP


_raw: Sat Oct 18 12:09:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=91034 transport=TCP


_raw: Sat Oct 18 12:09:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76664 user=root fd=7u ip_version=4 dvc_id=90961 transport=UDP


_raw: Sat Oct 18 12:09:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4102 transport=UDP


_raw: Sat Oct 18 12:09:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=537 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     8080
tcp     3389
tcp       22
tcp    38441


_raw: Sat Oct 18 12:09:17 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78024 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 12:09:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=90581 transport=TCP


_raw: Sat Oct 18 12:09:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=90579 transport=TCP


_raw: Sat Oct 18 12:09:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76650 user=root fd=7u ip_version=4 dvc_id=91431 transport=UDP


_raw: Sat Oct 18 12:09:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3563 transport=UDP


_raw: Sat Oct 18 12:09:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4254 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Sat Oct 18 12:09:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=96268 transport=TCP


_raw: Sat Oct 18 12:09:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=89050 transport=TCP


_raw: Sat Oct 18 12:09:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=89048 transport=TCP


_raw: Sat Oct 18 12:09:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=90682 transport=UDP


_raw: Sat Oct 18 12:09:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4518 transport=UDP


_raw: Sat Oct 18 12:09:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2617 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 12:09:14 EDT 2025 file_hash=SHA2-256(stdin)= 83c57baff3609bb067d7efbade56a9db5b2d63e122e146fcfd3c30b54acff1a5


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=50923 pid=729442 user=pentester fd=169u ip_version=4 dvc_id=979252 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=36020 pid=729442 user=pentester fd=165u ip_version=4 dvc_id=979251 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=34715 pid=729442 user=pentester fd=164u ip_version=4 dvc_id=973764 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=57136 pid=729442 user=pentester fd=159u ip_version=4 dvc_id=973761 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=50987 pid=729442 user=pentester fd=156u ip_version=4 dvc_id=978404 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=43751 pid=729442 user=pentester fd=135u ip_version=4 dvc_id=979187 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=45065 pid=729442 user=pentester fd=128u ip_version=4 dvc_id=979186 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=54377 pid=729442 user=pentester fd=122u ip_version=4 dvc_id=979185 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=53993 pid=729442 user=pentester fd=119u ip_version=4 dvc_id=973667 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=47755 pid=729442 user=pentester fd=117u ip_version=4 dvc_id=978392 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=41707 pid=729442 user=pentester fd=106u ip_version=4 dvc_id=978390 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=41304 pid=729442 user=pentester fd=100u ip_version=4 dvc_id=973658 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=60920 pid=729442 user=pentester fd=90u ip_version=4 dvc_id=978314 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=32975 pid=729442 user=pentester fd=64u ip_version=4 dvc_id=978391 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77966 user=xrdp fd=11u ip_version=6 dvc_id=95499 transport=TCP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76692 user=root fd=7u ip_version=6 dvc_id=90588 transport=TCP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76692 user=root fd=6u ip_version=4 dvc_id=90586 transport=TCP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76591 user=root fd=7u ip_version=4 dvc_id=92317 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3493 transport=UDP


_raw: Sat Oct 18 12:09:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=1719 transport=UDP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=9392 pid=703709 user=root fd=4u ip_version=4 dvc_id=874097 transport=TCP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=40419 pid=699779 user=root fd=7u ip_version=4 dvc_id=858870 transport=TCP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=95039 transport=TCP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=91797 transport=TCP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=91795 transport=TCP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90585 transport=UDP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4009 transport=UDP


_raw: Sat Oct 18 12:09:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4226 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389
tcp    44995
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:09:10 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=728095 user=pentester fd=37u ip_version=6 dvc_id=914351 transport=TCP


_raw: Sat Oct 18 12:09:10 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=44995 pid=728095 user=pentester fd=16u ip_version=6 dvc_id=915509 transport=TCP


_raw: Sat Oct 18 12:09:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78253 user=xrdp fd=11u ip_version=6 dvc_id=94909 transport=TCP


_raw: Sat Oct 18 12:09:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=7u ip_version=6 dvc_id=89930 transport=TCP


_raw: Sat Oct 18 12:09:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=6u ip_version=4 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 12:09:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76890 user=root fd=7u ip_version=4 dvc_id=89862 transport=UDP


_raw: Sat Oct 18 12:09:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3570 transport=UDP


_raw: Sat Oct 18 12:09:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=3067 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=735279 user=_gvm fd=4u ip_version=4 dvc_id=925447 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=735276 user=_gvm fd=4u ip_version=4 dvc_id=925925 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=715682 user=postgres fd=7u ip_version=4 dvc_id=838335 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=715667 user=mosquitto fd=5u ip_version=4 dvc_id=836029 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78006 user=xrdp fd=11u ip_version=6 dvc_id=94671 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=7u ip_version=6 dvc_id=91660 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=6u ip_version=4 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76666 user=root fd=7u ip_version=4 dvc_id=92296 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=2635 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2620 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77925 user=xrdp fd=11u ip_version=6 dvc_id=93793 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=7u ip_version=6 dvc_id=90586 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=6u ip_version=4 dvc_id=90584 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76479 user=root fd=7u ip_version=4 dvc_id=90009 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2849 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77898 user=xrdp fd=11u ip_version=6 dvc_id=96358 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=89751 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=89749 transport=TCP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91447 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 12:09:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=698 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:09:06 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77894 user=xrdp fd=11u ip_version=6 dvc_id=96270 transport=TCP


_raw: Sat Oct 18 12:09:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=90515 transport=TCP


_raw: Sat Oct 18 12:09:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=90513 transport=TCP


_raw: Sat Oct 18 12:09:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76510 user=root fd=7u ip_version=4 dvc_id=90457 transport=UDP


_raw: Sat Oct 18 12:09:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=706 user=root fd=7u ip_version=4 dvc_id=569 transport=UDP


_raw: Sat Oct 18 12:09:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=3564 transport=UDP


_raw:
Proto   Port
udp    56219
udp    40977
udp       68
udp       68
udp       68
tcp       22
tcp    41637
tcp     3350
tcp       22
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:09:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=56219 pid=702571 user=pentester fd=63u ip_version=4 dvc_id=904424 transport=UDP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=40977 pid=702571 user=pentester fd=61u ip_version=4 dvc_id=904423 transport=UDP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=702484 user=pentester fd=37u ip_version=6 dvc_id=844998 transport=TCP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41637 pid=702484 user=pentester fd=16u ip_version=6 dvc_id=835590 transport=TCP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78320 user=xrdp fd=11u ip_version=6 dvc_id=96596 transport=TCP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=7u ip_version=6 dvc_id=89734 transport=TCP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=6u ip_version=4 dvc_id=89732 transport=TCP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76840 user=root fd=7u ip_version=4 dvc_id=91666 transport=UDP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4032 transport=UDP


_raw: Sat Oct 18 12:09:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2773 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=57932 pid=721529 user=pentester fd=215u ip_version=4 dvc_id=1094499 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=44838 pid=721529 user=pentester fd=210u ip_version=4 dvc_id=1094550 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=45715 pid=721529 user=pentester fd=201u ip_version=4 dvc_id=1084919 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=49532 pid=721529 user=pentester fd=197u ip_version=4 dvc_id=1094103 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=38702 pid=721529 user=pentester fd=195u ip_version=4 dvc_id=1083901 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=47644 pid=721529 user=pentester fd=194u ip_version=4 dvc_id=1083900 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=46042 pid=721529 user=pentester fd=192u ip_version=4 dvc_id=1084918 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=38400 pid=721529 user=pentester fd=186u ip_version=4 dvc_id=1092823 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=55773 pid=721529 user=pentester fd=175u ip_version=4 dvc_id=1092811 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=34727 pid=721529 user=pentester fd=173u ip_version=4 dvc_id=1092816 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=34132 pid=721529 user=pentester fd=156u ip_version=4 dvc_id=1092540 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=58628 pid=721529 user=pentester fd=155u ip_version=4 dvc_id=1092539 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=56752 pid=721529 user=pentester fd=127u ip_version=4 dvc_id=1083782 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=53810 pid=721529 user=pentester fd=124u ip_version=4 dvc_id=1092542 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=34164 pid=721529 user=pentester fd=118u ip_version=4 dvc_id=1070975 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=54449 pid=721529 user=pentester fd=114u ip_version=4 dvc_id=1070976 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=48648 pid=721529 user=pentester fd=80u ip_version=4 dvc_id=1084556 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=x-www-browser dest_ip=* dest_port=40115 pid=721529 user=pentester fd=75u ip_version=4 dvc_id=1092543 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=719083 user=pentester fd=37u ip_version=6 dvc_id=859298 transport=TCP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=43765 pid=719083 user=pentester fd=16u ip_version=6 dvc_id=858207 transport=TCP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78160 user=xrdp fd=11u ip_version=6 dvc_id=94017 transport=TCP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=7u ip_version=6 dvc_id=91328 transport=TCP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=6u ip_version=4 dvc_id=91326 transport=TCP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76805 user=root fd=7u ip_version=4 dvc_id=92243 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4112 transport=UDP


_raw: Sat Oct 18 12:09:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1973 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 12:09:03 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715626 user=pentester fd=37u ip_version=6 dvc_id=855773 transport=TCP


_raw: Sat Oct 18 12:09:03 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42559 pid=715626 user=pentester fd=16u ip_version=6 dvc_id=853771 transport=TCP


_raw: Sat Oct 18 12:09:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77918 user=xrdp fd=11u ip_version=6 dvc_id=96359 transport=TCP


_raw: Sat Oct 18 12:09:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=7u ip_version=6 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 12:09:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=6u ip_version=4 dvc_id=90617 transport=TCP


_raw: Sat Oct 18 12:09:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76562 user=root fd=7u ip_version=4 dvc_id=91321 transport=UDP


_raw: Sat Oct 18 12:09:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=711 transport=UDP


_raw: Sat Oct 18 12:09:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1626 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp    42559
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    56079
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:08:57 EDT 2025 app=firefox-esr dest_ip=* dest_port=56079 pid=721122 user=pentester fd=118u ip_version=4 dvc_id=883507 transport=UDP


_raw: Sat Oct 18 12:08:57 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77922 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Sat Oct 18 12:08:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=7u ip_version=6 dvc_id=90933 transport=TCP


_raw: Sat Oct 18 12:08:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=6u ip_version=4 dvc_id=90931 transport=TCP


_raw: Sat Oct 18 12:08:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76564 user=root fd=7u ip_version=4 dvc_id=92313 transport=UDP


_raw: Sat Oct 18 12:08:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=706 user=root fd=7u ip_version=4 dvc_id=693 transport=UDP


_raw: Sat Oct 18 12:08:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2945 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     8889
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp    45637
tcp      636
tcp     3350
tcp     1433
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw: Sat Oct 18 12:08:53 EDT 2025 app=x-www-browser dest_ip=* dest_port=55051 pid=705621 user=pentester fd=225u ip_version=4 dvc_id=946636 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=x-www-browser dest_ip=* dest_port=44626 pid=705621 user=pentester fd=213u ip_version=4 dvc_id=944770 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=x-www-browser dest_ip=* dest_port=57874 pid=705621 user=pentester fd=171u ip_version=4 dvc_id=945866 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=x-www-browser dest_ip=* dest_port=59268 pid=705621 user=pentester fd=146u ip_version=4 dvc_id=945867 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=x-www-browser dest_ip=* dest_port=55996 pid=705621 user=pentester fd=144u ip_version=4 dvc_id=945868 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=x-www-browser dest_ip=* dest_port=49733 pid=705621 user=pentester fd=143u ip_version=4 dvc_id=947213 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=x-www-browser dest_ip=* dest_port=37001 pid=705621 user=pentester fd=131u ip_version=4 dvc_id=945865 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78093 user=xrdp fd=11u ip_version=6 dvc_id=94642 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=7u ip_version=6 dvc_id=92378 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=6u ip_version=4 dvc_id=92376 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76689 user=root fd=7u ip_version=4 dvc_id=90574 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1561 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3965 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726453 user=pentester fd=37u ip_version=6 dvc_id=904211 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42789 pid=726453 user=pentester fd=16u ip_version=6 dvc_id=904195 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=30u ip_version=4 dvc_id=862461 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=29u ip_version=4 dvc_id=862460 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=28u ip_version=6 dvc_id=862459 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=27u ip_version=6 dvc_id=862458 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=138 pid=718710 user=root fd=17u ip_version=4 dvc_id=859993 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=138 pid=718710 user=root fd=16u ip_version=4 dvc_id=859992 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=137 pid=718710 user=root fd=15u ip_version=4 dvc_id=859991 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=137 pid=718710 user=root fd=14u ip_version=4 dvc_id=859990 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=nmbd dest_ip=* dest_port=138 pid=718710 user=root fd=13u ip_version=4 dvc_id=859979 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=nmbd dest_ip=* dest_port=137 pid=718710 user=root fd=12u ip_version=4 dvc_id=859978 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77884 user=xrdp fd=11u ip_version=6 dvc_id=96345 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=88988 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=88978 transport=TCP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76525 user=root fd=7u ip_version=4 dvc_id=89807 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=488 transport=UDP


_raw: Sat Oct 18 12:08:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1608 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      137
udp      137
udp      137
udp      138
udp      138
udp      138
tcp      139
tcp       22
tcp      445
tcp      139
tcp       22
tcp      445
tcp     3350
tcp    42789
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=3004 pid=735347 user=root fd=7u ip_version=4 dvc_id=1012142 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=732634 user=root fd=7u ip_version=4 dvc_id=1001767 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=732626 user=root fd=7u ip_version=4 dvc_id=1003530 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=3003 pid=730336 user=root fd=7u ip_version=6 dvc_id=994841 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=3003 pid=730329 user=root fd=7u ip_version=4 dvc_id=994840 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=3001 pid=728299 user=root fd=7u ip_version=6 dvc_id=990222 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=3001 pid=728294 user=root fd=7u ip_version=4 dvc_id=990221 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=728188 user=root fd=7u ip_version=6 dvc_id=987103 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=728182 user=root fd=7u ip_version=4 dvc_id=987102 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=728097 user=root fd=7u ip_version=6 dvc_id=987446 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=728090 user=root fd=7u ip_version=4 dvc_id=987445 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728081 user=root fd=7u ip_version=6 dvc_id=987419 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728075 user=root fd=7u ip_version=4 dvc_id=987418 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727790 user=root fd=7u ip_version=6 dvc_id=986002 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727783 user=root fd=7u ip_version=4 dvc_id=986001 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717116 user=root fd=7u ip_version=6 dvc_id=944991 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717109 user=root fd=7u ip_version=4 dvc_id=944990 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78080 user=xrdp fd=11u ip_version=6 dvc_id=96453 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=7u ip_version=6 dvc_id=91396 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=6u ip_version=4 dvc_id=91394 transport=TCP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76647 user=root fd=7u ip_version=4 dvc_id=88050 transport=UDP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=996 transport=UDP


_raw: Sat Oct 18 12:08:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2751 transport=UDP


_raw:
Proto   Port
udp    48182
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    44343


_raw: Sat Oct 18 12:08:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=701492 user=pentester fd=37u ip_version=6 dvc_id=863228 transport=TCP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=44343 pid=701492 user=pentester fd=16u ip_version=6 dvc_id=839389 transport=TCP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=firefox-esr dest_ip=* dest_port=53036 pid=695858 user=pentester fd=232u ip_version=4 dvc_id=1033179 transport=UDP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78087 user=xrdp fd=11u ip_version=6 dvc_id=93987 transport=TCP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=89901 transport=TCP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=89899 transport=TCP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=90939 transport=UDP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3758 transport=UDP


_raw: Sat Oct 18 12:08:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=397 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:08:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78230 user=xrdp fd=11u ip_version=6 dvc_id=94586 transport=TCP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76870 user=root fd=7u ip_version=6 dvc_id=91592 transport=TCP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76870 user=root fd=6u ip_version=4 dvc_id=91590 transport=TCP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76769 user=root fd=7u ip_version=4 dvc_id=91531 transport=UDP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=95557 transport=TCP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76630 user=root fd=7u ip_version=6 dvc_id=91692 transport=TCP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76630 user=root fd=6u ip_version=4 dvc_id=91690 transport=TCP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76514 user=root fd=7u ip_version=4 dvc_id=89652 transport=UDP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4208 transport=UDP


_raw: Sat Oct 18 12:08:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=817 transport=UDP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=45725 pid=724078 user=root fd=9u ip_version=4 dvc_id=1336450 transport=TCP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=721164 user=root fd=282u ip_version=6 dvc_id=1318756 transport=TCP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=721164 user=root fd=281u ip_version=6 dvc_id=1318750 transport=TCP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=720734 user=postgres fd=7u ip_version=4 dvc_id=1319180 transport=TCP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78485 user=xrdp fd=11u ip_version=6 dvc_id=93858 transport=TCP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=7u ip_version=6 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=6u ip_version=4 dvc_id=89952 transport=TCP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77015 user=root fd=7u ip_version=4 dvc_id=91617 transport=UDP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3040 transport=UDP


_raw: Sat Oct 18 12:08:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=1698 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp    45725
tcp       22
tcp     5432
tcp     5432
tcp     7687
tcp     3389
tcp     7474
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     1883
tcp     3350
tcp       22
tcp     5432
tcp     1883
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 12:08:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78201 user=xrdp fd=11u ip_version=6 dvc_id=96489 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=7u ip_version=6 dvc_id=90905 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=6u ip_version=4 dvc_id=90903 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76842 user=root fd=7u ip_version=4 dvc_id=92211 transport=UDP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3919 transport=UDP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3904 transport=UDP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715926 user=pentester fd=37u ip_version=6 dvc_id=854060 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45661 pid=715926 user=pentester fd=16u ip_version=6 dvc_id=854051 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77938 user=xrdp fd=11u ip_version=6 dvc_id=96351 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=7u ip_version=6 dvc_id=91458 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=6u ip_version=4 dvc_id=91456 transport=TCP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76582 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=3573 transport=UDP


_raw: Sat Oct 18 12:08:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=5146 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=718339 user=root fd=36u ip_version=6 dvc_id=840612 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=718339 user=root fd=35u ip_version=6 dvc_id=842627 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=718339 user=root fd=34u ip_version=6 dvc_id=844798 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=718339 user=root fd=33u ip_version=6 dvc_id=842626 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=718339 user=root fd=32u ip_version=6 dvc_id=840611 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=718339 user=root fd=31u ip_version=6 dvc_id=840610 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=718339 user=root fd=30u ip_version=6 dvc_id=842625 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=718339 user=root fd=29u ip_version=6 dvc_id=842624 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=718339 user=root fd=28u ip_version=6 dvc_id=842623 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=718339 user=root fd=27u ip_version=6 dvc_id=840609 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=718339 user=root fd=26u ip_version=6 dvc_id=844797 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=718339 user=root fd=25u ip_version=6 dvc_id=840608 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=718339 user=root fd=24u ip_version=6 dvc_id=840607 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=718339 user=root fd=23u ip_version=6 dvc_id=843078 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=718339 user=root fd=22u ip_version=6 dvc_id=840606 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=718339 user=root fd=21u ip_version=6 dvc_id=844795 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=718339 user=root fd=20u ip_version=6 dvc_id=844796 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=10.0.254.205 dest_port=443 pid=718339 user=root fd=19u ip_version=4 dvc_id=842622 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=718339 user=root fd=18u ip_version=6 dvc_id=842621 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=718339 user=root fd=14u ip_version=6 dvc_id=844794 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=718339 user=root fd=13u ip_version=6 dvc_id=843077 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=45495 pid=718339 user=root fd=12u ip_version=6 dvc_id=842618 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=718339 user=root fd=11u ip_version=6 dvc_id=843076 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=718339 user=root fd=10u ip_version=6 dvc_id=842616 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=718339 user=root fd=9u ip_version=6 dvc_id=843075 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=718339 user=root fd=8u ip_version=6 dvc_id=842614 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=718339 user=root fd=7u ip_version=6 dvc_id=844793 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=718339 user=root fd=6u ip_version=6 dvc_id=843073 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78193 user=xrdp fd=11u ip_version=6 dvc_id=95559 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=7u ip_version=6 dvc_id=89076 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=6u ip_version=4 dvc_id=89074 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76818 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3667 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4216 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     3389
tcp     1433
tcp     1883
tcp     5985
tcp     5986
tcp      139
tcp      143
tcp      135
tcp       25
tcp       21
tcp       22
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp    45495
tcp     3350
tcp      587
tcp      636


_raw: Sat Oct 18 12:08:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=14237 user=pentester fd=37u ip_version=6 dvc_id=81843 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41205 pid=14237 user=pentester fd=14u ip_version=6 dvc_id=84268 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=kdeconnectd dest_ip=* dest_port=53879 pid=2183 user=pentester fd=23u ip_version=6 dvc_id=11661 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=kdeconnectd dest_ip=* dest_port=33773 pid=2183 user=pentester fd=22u ip_version=4 dvc_id=11660 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=21u ip_version=6 dvc_id=11658 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=20u ip_version=4 dvc_id=11657 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=19u ip_version=6 dvc_id=12794 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=18u ip_version=6 dvc_id=12793 transport=UDP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=934 user=xrdp fd=11u ip_version=6 dvc_id=5378 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=7u ip_version=6 dvc_id=4586 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=6u ip_version=4 dvc_id=4576 transport=TCP


_raw: Sat Oct 18 12:08:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=667 user=root fd=7u ip_version=4 dvc_id=760 transport=UDP


_raw: Sat Oct 18 12:08:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93110 transport=TCP


_raw: Sat Oct 18 12:08:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=90711 transport=TCP


_raw: Sat Oct 18 12:08:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=90709 transport=TCP


_raw: Sat Oct 18 12:08:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76558 user=root fd=7u ip_version=4 dvc_id=91467 transport=UDP


_raw: Sat Oct 18 12:08:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=3853 transport=UDP


_raw: Sat Oct 18 12:08:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:08:33 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77913 user=xrdp fd=11u ip_version=6 dvc_id=93015 transport=TCP


_raw: Sat Oct 18 12:08:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=92300 transport=TCP


_raw: Sat Oct 18 12:08:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=92298 transport=TCP


_raw: Sat Oct 18 12:08:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76511 user=root fd=7u ip_version=4 dvc_id=88033 transport=UDP


_raw: Sat Oct 18 12:08:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4225 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp    34297
tcp       22
tcp     3350


_raw: Sat Oct 18 12:08:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2686 transport=UDP


_raw: Sat Oct 18 12:08:32 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=34297 pid=717973 user=pentester fd=16u ip_version=6 dvc_id=860405 transport=TCP


_raw: Sat Oct 18 12:08:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77881 user=xrdp fd=11u ip_version=6 dvc_id=96472 transport=TCP


_raw: Sat Oct 18 12:08:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76566 user=root fd=7u ip_version=6 dvc_id=88968 transport=TCP


_raw: Sat Oct 18 12:08:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76566 user=root fd=6u ip_version=4 dvc_id=88958 transport=TCP


_raw: Sat Oct 18 12:08:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76465 user=root fd=7u ip_version=4 dvc_id=89689 transport=UDP


_raw: Sat Oct 18 12:08:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2725 transport=UDP


_raw: Sat Oct 18 12:08:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3658 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp    34933
tcp     3350
tcp       22
tcp     8080


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp     8889
tcp       53
tcp       22


_raw: Sat Oct 18 12:08:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=729118 user=pentester fd=37u ip_version=6 dvc_id=902148 transport=TCP


_raw: Sat Oct 18 12:08:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=34933 pid=729118 user=pentester fd=16u ip_version=6 dvc_id=901079 transport=TCP


_raw: Sat Oct 18 12:08:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77752 user=xrdp fd=11u ip_version=6 dvc_id=95601 transport=TCP


_raw: Sat Oct 18 12:08:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=7u ip_version=6 dvc_id=88828 transport=TCP


_raw: Sat Oct 18 12:08:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=6u ip_version=4 dvc_id=88818 transport=TCP


_raw: Sat Oct 18 12:08:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76367 user=root fd=7u ip_version=4 dvc_id=89616 transport=UDP


_raw: Sat Oct 18 12:08:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=717 transport=UDP


_raw: Sat Oct 18 12:08:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=4035 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       80
tcp     8889
tcp       22
tcp     5432
tcp     9392
tcp     1883
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:08:21 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78107 user=xrdp fd=11u ip_version=6 dvc_id=94813 transport=TCP


_raw: Sat Oct 18 12:08:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=7u ip_version=6 dvc_id=92237 transport=TCP


_raw: Sat Oct 18 12:08:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 12:08:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76706 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 12:08:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 12:08:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3580 transport=UDP


_raw: Sat Oct 18 12:08:19 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77944 user=xrdp fd=11u ip_version=6 dvc_id=94197 transport=TCP


_raw: Sat Oct 18 12:08:19 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=7u ip_version=6 dvc_id=91593 transport=TCP


_raw: Sat Oct 18 12:08:19 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=6u ip_version=4 dvc_id=91583 transport=TCP


_raw: Sat Oct 18 12:08:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=90521 transport=UDP


_raw: Sat Oct 18 12:08:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=841 transport=UDP


_raw: Sat Oct 18 12:08:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=3590 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    40654
udp       68
udp       68
udp       68
udp    55035
tcp     1883
tcp     5432
tcp     9392
tcp       80
tcp       22
tcp     6379
tcp     3389
tcp     3350
tcp     6379
tcp     1883
tcp     5432
tcp       22


_raw:
Proto   Port
udp    46209
udp       68
udp       68
udp       68
tcp       22
tcp    37351
tcp     3350
tcp       22
tcp     8080
tcp     3389


_raw: Sat Oct 18 12:08:18 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=728177 user=_gvm fd=4u ip_version=4 dvc_id=934021 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=728174 user=_gvm fd=4u ip_version=4 dvc_id=934022 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=722742 user=postgres fd=7u ip_version=4 dvc_id=886146 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=redis-server dest_ip=127.0.0.1 dest_port=6379 pid=721622 user=redis fd=8u ip_version=4 dvc_id=873373 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=721232 user=mosquitto fd=5u ip_version=4 dvc_id=870055 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=x-www-browser dest_ip=* dest_port=55035 pid=715561 user=pentester fd=90u ip_version=4 dvc_id=992463 transport=UDP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=x-www-browser dest_ip=* dest_port=40654 pid=715561 user=pentester fd=36u ip_version=4 dvc_id=994549 transport=UDP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78056 user=xrdp fd=11u ip_version=6 dvc_id=94759 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=7u ip_version=6 dvc_id=90769 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=6u ip_version=4 dvc_id=90759 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76695 user=root fd=7u ip_version=4 dvc_id=89933 transport=UDP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=458 transport=UDP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=1673 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     7474
tcp     7687
tcp     8080
tcp    45363
tcp       22
tcp     3389
tcp     3350
tcp     8081


_raw: Sat Oct 18 12:08:18 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715382 user=pentester fd=37u ip_version=6 dvc_id=941126 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37351 pid=715382 user=pentester fd=16u ip_version=6 dvc_id=932840 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=firefox-esr dest_ip=* dest_port=46209 pid=712342 user=pentester fd=66u ip_version=4 dvc_id=1110040 transport=UDP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77903 user=xrdp fd=11u ip_version=6 dvc_id=91997 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76570 user=root fd=7u ip_version=6 dvc_id=89069 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76570 user=root fd=6u ip_version=4 dvc_id=89059 transport=TCP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76469 user=root fd=7u ip_version=4 dvc_id=88979 transport=UDP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1519 transport=UDP


_raw: Sat Oct 18 12:08:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4230 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78212 user=xrdp fd=11u ip_version=6 dvc_id=92976 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=7u ip_version=6 dvc_id=91320 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=6u ip_version=4 dvc_id=91310 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76852 user=root fd=7u ip_version=4 dvc_id=90020 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=934 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=913 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=701558 user=root fd=7u ip_version=4 dvc_id=841895 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=700947 user=root fd=7u ip_version=4 dvc_id=837485 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=700940 user=root fd=7u ip_version=4 dvc_id=839686 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=54437 pid=697412 user=pentester fd=166u ip_version=4 dvc_id=986166 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=40276 pid=697412 user=pentester fd=150u ip_version=4 dvc_id=984811 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=41283 pid=697412 user=pentester fd=147u ip_version=4 dvc_id=984816 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=42067 pid=697412 user=pentester fd=142u ip_version=4 dvc_id=984806 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=49914 pid=697412 user=pentester fd=140u ip_version=4 dvc_id=984813 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=44009 pid=697412 user=pentester fd=138u ip_version=4 dvc_id=984812 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=42286 pid=697412 user=pentester fd=128u ip_version=4 dvc_id=983552 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=47086 pid=697412 user=pentester fd=124u ip_version=4 dvc_id=982868 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=52903 pid=697412 user=pentester fd=123u ip_version=4 dvc_id=984801 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=41221 pid=697412 user=pentester fd=121u ip_version=4 dvc_id=983525 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=60225 pid=697412 user=pentester fd=120u ip_version=4 dvc_id=982865 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=41262 pid=697412 user=pentester fd=119u ip_version=4 dvc_id=982867 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=33034 pid=697412 user=pentester fd=113u ip_version=4 dvc_id=982859 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=42794 pid=697412 user=pentester fd=105u ip_version=4 dvc_id=985182 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=x-www-browser dest_ip=* dest_port=55138 pid=697412 user=pentester fd=103u ip_version=4 dvc_id=982845 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77959 user=xrdp fd=11u ip_version=6 dvc_id=96290 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=7u ip_version=6 dvc_id=91353 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=6u ip_version=4 dvc_id=91351 transport=TCP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76526 user=root fd=7u ip_version=4 dvc_id=90690 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4258 transport=UDP


_raw: Sat Oct 18 12:08:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:08:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77868 user=xrdp fd=11u ip_version=6 dvc_id=93133 transport=TCP


_raw: Sat Oct 18 12:08:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=7u ip_version=6 dvc_id=90603 transport=TCP


_raw: Sat Oct 18 12:08:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=6u ip_version=4 dvc_id=90593 transport=TCP


_raw: Sat Oct 18 12:08:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76527 user=root fd=7u ip_version=4 dvc_id=89849 transport=UDP