_raw: Sat Oct 18 11:46:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=6u ip_version=4 dvc_id=91351 transport=TCP


_raw: Sat Oct 18 11:46:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76608 user=root fd=7u ip_version=4 dvc_id=89771 transport=UDP


_raw: Sat Oct 18 11:46:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 11:46:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4228 transport=UDP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=x-www-browser dest_ip=* dest_port=58941 pid=710986 user=pentester fd=230u ip_version=4 dvc_id=902361 transport=UDP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=x-www-browser dest_ip=* dest_port=57598 pid=710986 user=pentester fd=155u ip_version=4 dvc_id=902258 transport=UDP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=x-www-browser dest_ip=* dest_port=41707 pid=710986 user=pentester fd=102u ip_version=4 dvc_id=900840 transport=UDP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78178 user=xrdp fd=11u ip_version=6 dvc_id=94976 transport=TCP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=7u ip_version=6 dvc_id=89067 transport=TCP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=6u ip_version=4 dvc_id=89065 transport=TCP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76817 user=root fd=7u ip_version=4 dvc_id=89871 transport=UDP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=664 transport=UDP


_raw: Sat Oct 18 11:46:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw:
Proto   Port
udp    41707
udp    58941
udp    49213
udp       68
udp       68
udp       68
udp    57598
tcp       22
tcp     3350
tcp     3389
tcp       22

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:46:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77950 user=xrdp fd=11u ip_version=6 dvc_id=93072 transport=TCP


_raw: Sat Oct 18 11:46:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=90669 transport=TCP


_raw: Sat Oct 18 11:46:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=90667 transport=TCP


_raw: Sat Oct 18 11:46:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90586 transport=UDP


_raw: Sat Oct 18 11:46:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3765 transport=UDP


_raw: Sat Oct 18 11:46:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=1720 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:46:28 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=709898 user=pentester fd=37u ip_version=6 dvc_id=872662 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=46507 pid=709898 user=pentester fd=16u ip_version=6 dvc_id=867813 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=firefox-esr dest_ip=* dest_port=41184 pid=700644 user=pentester fd=92u ip_version=4 dvc_id=919170 transport=UDP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=firefox-esr dest_ip=* dest_port=51568 pid=700644 user=pentester fd=40u ip_version=4 dvc_id=919183 transport=UDP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78118 user=xrdp fd=11u ip_version=6 dvc_id=93030 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76831 user=root fd=7u ip_version=6 dvc_id=91386 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76831 user=root fd=6u ip_version=4 dvc_id=91376 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76730 user=root fd=7u ip_version=4 dvc_id=90855 transport=UDP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4445 transport=UDP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4423 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    41184
udp    51568
tcp       22
tcp     8080
tcp       22
tcp     3389
tcp    46507
tcp     3350


_raw: Sat Oct 18 11:46:28 EDT 2025 app=python3 dest_ip=* dest_port=8000 pid=703023 user=pentester fd=3u ip_version=4 dvc_id=848284 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78362 user=xrdp fd=11u ip_version=6 dvc_id=95572 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76983 user=root fd=7u ip_version=6 dvc_id=91756 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76983 user=root fd=6u ip_version=4 dvc_id=91754 transport=TCP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76880 user=root fd=7u ip_version=4 dvc_id=92274 transport=UDP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=2733 transport=UDP


_raw: Sat Oct 18 11:46:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2716 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:46:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78242 user=xrdp fd=11u ip_version=6 dvc_id=95969 transport=TCP


_raw: Sat Oct 18 11:46:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=7u ip_version=6 dvc_id=90108 transport=TCP


_raw: Sat Oct 18 11:46:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=6u ip_version=4 dvc_id=90098 transport=TCP


_raw: Sat Oct 18 11:46:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76812 user=root fd=7u ip_version=4 dvc_id=91280 transport=UDP


_raw: Sat Oct 18 11:46:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3707 transport=UDP


_raw: Sat Oct 18 11:46:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3681 transport=UDP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77913 user=xrdp fd=11u ip_version=6 dvc_id=93015 transport=TCP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=92300 transport=TCP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=92298 transport=TCP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76511 user=root fd=7u ip_version=4 dvc_id=88033 transport=UDP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4225 transport=UDP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2686 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:46:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=58131 pid=697858 user=pentester fd=125u ip_version=4 dvc_id=891436 transport=UDP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=x-www-browser dest_ip=* dest_port=42938 pid=697858 user=pentester fd=40u ip_version=4 dvc_id=894215 transport=UDP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93110 transport=TCP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=90711 transport=TCP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=90709 transport=TCP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76558 user=root fd=7u ip_version=4 dvc_id=91467 transport=UDP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=3853 transport=UDP


_raw: Sat Oct 18 11:46:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp    42938
udp       68
udp       68
udp       68
udp    58131
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    53055
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     8080
tcp       22
tcp    43765
tcp     3389


_raw: Sat Oct 18 11:46:25 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77881 user=xrdp fd=11u ip_version=6 dvc_id=96472 transport=TCP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76566 user=root fd=7u ip_version=6 dvc_id=88968 transport=TCP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76566 user=root fd=6u ip_version=4 dvc_id=88958 transport=TCP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76465 user=root fd=7u ip_version=4 dvc_id=89689 transport=UDP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2725 transport=UDP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3658 transport=UDP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77933 user=xrdp fd=11u ip_version=6 dvc_id=91076 transport=TCP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=7u ip_version=6 dvc_id=92457 transport=TCP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=6u ip_version=4 dvc_id=92455 transport=TCP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76557 user=root fd=7u ip_version=4 dvc_id=90399 transport=UDP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 11:46:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=5193 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:46:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77946 user=xrdp fd=11u ip_version=6 dvc_id=93897 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=7u ip_version=6 dvc_id=89034 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=6u ip_version=4 dvc_id=89032 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=91451 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4350 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1804 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78140 user=xrdp fd=11u ip_version=6 dvc_id=95507 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=7u ip_version=6 dvc_id=88954 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=6u ip_version=4 dvc_id=88952 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76749 user=root fd=7u ip_version=4 dvc_id=88879 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=2040 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2024 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94680 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=7u ip_version=6 dvc_id=92245 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=6u ip_version=4 dvc_id=92243 transport=TCP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=92206 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4269 transport=UDP


_raw: Sat Oct 18 11:46:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=625 user=root fd=7u ip_version=4 dvc_id=2801 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 11:46:15 EDT 2025 app=sshd-session dest_ip=127.0.0.1 dest_port=6010 pid=701183 user=kali fd=11u ip_version=4 dvc_id=847348 transport=TCP


_raw: Sat Oct 18 11:46:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78258 user=xrdp fd=11u ip_version=6 dvc_id=94773 transport=TCP


_raw: Sat Oct 18 11:46:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76958 user=root fd=7u ip_version=6 dvc_id=93339 transport=TCP


_raw: Sat Oct 18 11:46:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76958 user=root fd=6u ip_version=4 dvc_id=93337 transport=TCP


_raw: Sat Oct 18 11:46:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76857 user=root fd=7u ip_version=4 dvc_id=89908 transport=UDP


_raw: Sat Oct 18 11:46:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=878 transport=UDP


_raw: Sat Oct 18 11:46:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=863 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     6010
tcp     6010
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:46:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78212 user=xrdp fd=11u ip_version=6 dvc_id=92976 transport=TCP


_raw: Sat Oct 18 11:46:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=7u ip_version=6 dvc_id=91320 transport=TCP


_raw: Sat Oct 18 11:46:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=6u ip_version=4 dvc_id=91310 transport=TCP


_raw: Sat Oct 18 11:46:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76852 user=root fd=7u ip_version=4 dvc_id=90020 transport=UDP


_raw: Sat Oct 18 11:46:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=934 transport=UDP


_raw: Sat Oct 18 11:46:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=913 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:46:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77961 user=xrdp fd=11u ip_version=6 dvc_id=93129 transport=TCP


_raw: Sat Oct 18 11:46:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=7u ip_version=6 dvc_id=91091 transport=TCP


_raw: Sat Oct 18 11:46:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=6u ip_version=4 dvc_id=91089 transport=TCP


_raw: Sat Oct 18 11:46:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76599 user=root fd=7u ip_version=4 dvc_id=91751 transport=UDP


_raw: Sat Oct 18 11:46:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3650 transport=UDP


_raw: Sat Oct 18 11:46:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=551 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    58941
udp    49213
udp       68
udp       68
udp       68
udp    57598
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:46:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95973 transport=TCP


_raw: Sat Oct 18 11:46:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=7u ip_version=6 dvc_id=89832 transport=TCP


_raw: Sat Oct 18 11:46:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=6u ip_version=4 dvc_id=89830 transport=TCP


_raw: Sat Oct 18 11:46:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=89004 transport=UDP


_raw: Sat Oct 18 11:46:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4122 transport=UDP


_raw: Sat Oct 18 11:46:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=1765 transport=UDP


_raw: Sat Oct 18 11:46:06 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78068 user=xrdp fd=11u ip_version=6 dvc_id=94812 transport=TCP


_raw: Sat Oct 18 11:46:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76810 user=root fd=7u ip_version=6 dvc_id=91452 transport=TCP


_raw: Sat Oct 18 11:46:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76810 user=root fd=6u ip_version=4 dvc_id=91442 transport=TCP


_raw: Sat Oct 18 11:46:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76709 user=root fd=7u ip_version=4 dvc_id=90683 transport=UDP


_raw: Sat Oct 18 11:46:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4436 transport=UDP


_raw: Sat Oct 18 11:46:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=572 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     9392
tcp     5432
tcp     1883
tcp       80
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    52930
udp    40711
udp       68
udp       68
udp       68
tcp       22
tcp     8080
tcp       22
tcp     3389
tcp    46507
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:45:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77869 user=xrdp fd=11u ip_version=6 dvc_id=94695 transport=TCP


_raw: Sat Oct 18 11:45:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76611 user=root fd=7u ip_version=6 dvc_id=89692 transport=TCP


_raw: Sat Oct 18 11:45:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76611 user=root fd=6u ip_version=4 dvc_id=89682 transport=TCP


_raw: Sat Oct 18 11:45:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76510 user=root fd=7u ip_version=4 dvc_id=91554 transport=UDP


_raw: Sat Oct 18 11:45:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4134 transport=UDP


_raw: Sat Oct 18 11:45:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4101 transport=UDP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=x-www-browser dest_ip=* dest_port=47142 pid=719189 user=pentester fd=88u ip_version=4 dvc_id=859922 transport=UDP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=93161 transport=TCP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76745 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76745 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76638 user=root fd=7u ip_version=4 dvc_id=91378 transport=UDP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=693 user=root fd=7u ip_version=4 dvc_id=3681 transport=UDP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=611 user=root fd=7u ip_version=4 dvc_id=1887 transport=UDP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77894 user=xrdp fd=11u ip_version=6 dvc_id=96270 transport=TCP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=90515 transport=TCP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=90513 transport=TCP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76510 user=root fd=7u ip_version=4 dvc_id=90457 transport=UDP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=706 user=root fd=7u ip_version=4 dvc_id=569 transport=UDP


_raw: Sat Oct 18 11:45:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=3564 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    47142
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:45:54 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715626 user=pentester fd=37u ip_version=6 dvc_id=855773 transport=TCP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42559 pid=715626 user=pentester fd=16u ip_version=6 dvc_id=853771 transport=TCP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=42959 pid=715019 user=pentester fd=216u ip_version=4 dvc_id=882843 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=54555 pid=715019 user=pentester fd=209u ip_version=4 dvc_id=880261 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=53344 pid=715019 user=pentester fd=207u ip_version=4 dvc_id=880242 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=45815 pid=715019 user=pentester fd=206u ip_version=4 dvc_id=881078 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=37488 pid=715019 user=pentester fd=204u ip_version=4 dvc_id=881076 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=38291 pid=715019 user=pentester fd=197u ip_version=4 dvc_id=882389 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=44026 pid=715019 user=pentester fd=193u ip_version=4 dvc_id=882390 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=58699 pid=715019 user=pentester fd=175u ip_version=4 dvc_id=880801 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=33942 pid=715019 user=pentester fd=173u ip_version=4 dvc_id=880800 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=33581 pid=715019 user=pentester fd=172u ip_version=4 dvc_id=879503 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=36240 pid=715019 user=pentester fd=153u ip_version=4 dvc_id=879433 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=53832 pid=715019 user=pentester fd=150u ip_version=4 dvc_id=880803 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=47727 pid=715019 user=pentester fd=147u ip_version=4 dvc_id=879772 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=x-www-browser dest_ip=* dest_port=53371 pid=715019 user=pentester fd=139u ip_version=4 dvc_id=877381 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77918 user=xrdp fd=11u ip_version=6 dvc_id=96359 transport=TCP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=7u ip_version=6 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=6u ip_version=4 dvc_id=90617 transport=TCP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76562 user=root fd=7u ip_version=4 dvc_id=91321 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=711 transport=UDP


_raw: Sat Oct 18 11:45:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1626 transport=UDP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=firefox-esr dest_ip=* dest_port=40012 pid=727355 user=pentester fd=78u ip_version=4 dvc_id=888867 transport=UDP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=firefox-esr dest_ip=* dest_port=57411 pid=727355 user=pentester fd=71u ip_version=4 dvc_id=887046 transport=UDP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77947 user=xrdp fd=11u ip_version=6 dvc_id=94178 transport=TCP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76690 user=root fd=7u ip_version=6 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76690 user=root fd=6u ip_version=4 dvc_id=90739 transport=TCP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76589 user=root fd=7u ip_version=4 dvc_id=91798 transport=UDP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2590 transport=UDP


_raw: Sat Oct 18 11:45:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=461 transport=UDP


_raw:
Proto   Port
udp    40012
udp    57411
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw: Sat Oct 18 11:45:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77819 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Sat Oct 18 11:45:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76558 user=root fd=7u ip_version=6 dvc_id=90637 transport=TCP


_raw: Sat Oct 18 11:45:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76558 user=root fd=6u ip_version=4 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 11:45:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76453 user=root fd=7u ip_version=4 dvc_id=91498 transport=UDP


_raw: Sat Oct 18 11:45:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2899 transport=UDP


_raw: Sat Oct 18 11:45:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=2881 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    59386
udp       68
udp       68
udp       68
tcp       22
tcp     6010
tcp     6010
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:45:39 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=96590 transport=TCP


_raw: Sat Oct 18 11:45:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 11:45:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=89926 transport=TCP


_raw: Sat Oct 18 11:45:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89895 transport=UDP


_raw: Sat Oct 18 11:45:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=548 transport=UDP


_raw: Sat Oct 18 11:45:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=528 transport=UDP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77818 user=xrdp fd=11u ip_version=6 dvc_id=95506 transport=TCP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=7u ip_version=6 dvc_id=92220 transport=TCP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=6u ip_version=4 dvc_id=92218 transport=TCP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76434 user=root fd=7u ip_version=4 dvc_id=91175 transport=UDP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3619 transport=UDP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=492 transport=UDP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77998 user=xrdp fd=11u ip_version=6 dvc_id=92996 transport=TCP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76668 user=root fd=7u ip_version=6 dvc_id=88705 transport=TCP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76668 user=root fd=6u ip_version=4 dvc_id=88703 transport=TCP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76552 user=root fd=7u ip_version=4 dvc_id=90065 transport=UDP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=781 transport=UDP


_raw: Sat Oct 18 11:45:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1793 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    33349
udp    58451
udp    34679
udp    43628
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:45:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=34679 pid=698706 user=pentester fd=196u ip_version=4 dvc_id=957462 transport=UDP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=33349 pid=698706 user=pentester fd=125u ip_version=4 dvc_id=957461 transport=UDP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=58451 pid=698706 user=pentester fd=115u ip_version=4 dvc_id=957470 transport=UDP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=43628 pid=698706 user=pentester fd=98u ip_version=4 dvc_id=958502 transport=UDP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77926 user=xrdp fd=11u ip_version=6 dvc_id=93098 transport=TCP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=7u ip_version=6 dvc_id=90878 transport=TCP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=6u ip_version=4 dvc_id=90876 transport=TCP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76533 user=root fd=7u ip_version=4 dvc_id=90833 transport=UDP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=628 transport=UDP


_raw: Sat Oct 18 11:45:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=603 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:45:30 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78238 user=xrdp fd=11u ip_version=6 dvc_id=96589 transport=TCP


_raw: Sat Oct 18 11:45:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76939 user=root fd=7u ip_version=6 dvc_id=89045 transport=TCP


_raw: Sat Oct 18 11:45:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76939 user=root fd=6u ip_version=4 dvc_id=89043 transport=TCP


_raw: Sat Oct 18 11:45:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76838 user=root fd=7u ip_version=4 dvc_id=91492 transport=UDP


_raw: Sat Oct 18 11:45:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2032 transport=UDP


_raw: Sat Oct 18 11:45:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4160 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw: Sat Oct 18 11:45:24 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=695565 user=root fd=282u ip_version=6 dvc_id=836895 transport=TCP


_raw: Sat Oct 18 11:45:24 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=695565 user=root fd=281u ip_version=6 dvc_id=836889 transport=TCP


_raw: Sat Oct 18 11:45:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=96593 transport=TCP


_raw: Sat Oct 18 11:45:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90751 transport=TCP


_raw: Sat Oct 18 11:45:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 11:45:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=90698 transport=UDP


_raw: Sat Oct 18 11:45:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3656 transport=UDP


_raw: Sat Oct 18 11:45:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=1563 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     7687
tcp     7474
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    51475
udp    48253
udp    56966
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:45:15 EDT 2025 app=x-www-browser dest_ip=* dest_port=51475 pid=698123 user=pentester fd=156u ip_version=4 dvc_id=907768 transport=UDP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=x-www-browser dest_ip=* dest_port=48253 pid=698123 user=pentester fd=109u ip_version=4 dvc_id=909614 transport=UDP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=x-www-browser dest_ip=* dest_port=56966 pid=698123 user=pentester fd=78u ip_version=4 dvc_id=908687 transport=UDP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77971 user=xrdp fd=11u ip_version=6 dvc_id=93019 transport=TCP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=92278 transport=TCP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=92276 transport=TCP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=88762 transport=UDP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3862 transport=UDP


_raw: Sat Oct 18 11:45:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3848 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp     8080
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:45:10 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=701558 user=root fd=7u ip_version=4 dvc_id=841895 transport=TCP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=700947 user=root fd=7u ip_version=4 dvc_id=837485 transport=TCP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=700940 user=root fd=7u ip_version=4 dvc_id=839686 transport=TCP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77959 user=xrdp fd=11u ip_version=6 dvc_id=96290 transport=TCP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=7u ip_version=6 dvc_id=91353 transport=TCP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=6u ip_version=4 dvc_id=91351 transport=TCP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76526 user=root fd=7u ip_version=4 dvc_id=90690 transport=UDP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4258 transport=UDP


_raw: Sat Oct 18 11:45:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=96268 transport=TCP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=89050 transport=TCP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=89048 transport=TCP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=90682 transport=UDP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4518 transport=UDP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2617 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:45:09 EDT 2025 app=x-www-browser dest_ip=* dest_port=52055 pid=715343 user=pentester fd=86u ip_version=4 dvc_id=852772 transport=UDP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78024 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=90581 transport=TCP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=90579 transport=TCP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76650 user=root fd=7u ip_version=4 dvc_id=91431 transport=UDP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3563 transport=UDP


_raw: Sat Oct 18 11:45:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4254 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    54050
udp    52055
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:45:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77868 user=xrdp fd=11u ip_version=6 dvc_id=93133 transport=TCP


_raw: Sat Oct 18 11:45:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=7u ip_version=6 dvc_id=90603 transport=TCP


_raw: Sat Oct 18 11:45:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=6u ip_version=4 dvc_id=90593 transport=TCP


_raw: Sat Oct 18 11:45:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76527 user=root fd=7u ip_version=4 dvc_id=89849 transport=UDP


_raw: Sat Oct 18 11:45:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4190 transport=UDP


_raw: Sat Oct 18 11:45:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3609 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw: Sat Oct 18 11:45:04 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=94192 transport=TCP


_raw: Sat Oct 18 11:45:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=90439 transport=TCP


_raw: Sat Oct 18 11:45:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=90437 transport=TCP


_raw: Sat Oct 18 11:45:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76516 user=root fd=7u ip_version=4 dvc_id=91289 transport=UDP


_raw: Sat Oct 18 11:45:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=894 transport=UDP


_raw: Sat Oct 18 11:45:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1770 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     1883
tcp     5432
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw: Sat Oct 18 11:45:01 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=715682 user=postgres fd=7u ip_version=4 dvc_id=838335 transport=TCP


_raw: Sat Oct 18 11:45:01 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=715667 user=mosquitto fd=5u ip_version=4 dvc_id=836029 transport=TCP


_raw: Sat Oct 18 11:45:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78006 user=xrdp fd=11u ip_version=6 dvc_id=94671 transport=TCP


_raw: Sat Oct 18 11:45:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=7u ip_version=6 dvc_id=91660 transport=TCP


_raw: Sat Oct 18 11:45:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=6u ip_version=4 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 11:45:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76666 user=root fd=7u ip_version=4 dvc_id=92296 transport=UDP


_raw: Sat Oct 18 11:45:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=2635 transport=UDP


_raw: Sat Oct 18 11:45:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2620 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    59450
udp       68
udp       68
udp       68
tcp       22
tcp    41637
tcp     3350
tcp       22
tcp     3389
tcp     8080


_raw: Sat Oct 18 11:44:49 EDT 2025 app=firefox-esr dest_ip=* dest_port=59450 pid=702571 user=pentester fd=69u ip_version=4 dvc_id=872050 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=702484 user=pentester fd=37u ip_version=6 dvc_id=844998 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41637 pid=702484 user=pentester fd=16u ip_version=6 dvc_id=835590 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78320 user=xrdp fd=11u ip_version=6 dvc_id=96596 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=7u ip_version=6 dvc_id=89734 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=6u ip_version=4 dvc_id=89732 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76840 user=root fd=7u ip_version=4 dvc_id=91666 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4032 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2773 transport=UDP


_raw:
Proto   Port
udp    52562
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     8080
tcp     3350
tcp    33791
tcp     3389


_raw: Sat Oct 18 11:44:49 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=706370 user=pentester fd=37u ip_version=6 dvc_id=857600 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38179 pid=706370 user=pentester fd=16u ip_version=6 dvc_id=856926 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=443 pid=702850 user=root fd=7u ip_version=4 dvc_id=840515 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=80 pid=702843 user=root fd=7u ip_version=4 dvc_id=840502 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=35717 pid=698416 user=pentester fd=203u ip_version=4 dvc_id=1106624 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=60379 pid=698416 user=pentester fd=198u ip_version=4 dvc_id=1105740 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=41520 pid=698416 user=pentester fd=197u ip_version=4 dvc_id=1105714 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=46385 pid=698416 user=pentester fd=196u ip_version=4 dvc_id=1103382 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=59654 pid=698416 user=pentester fd=182u ip_version=4 dvc_id=1105715 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=59608 pid=698416 user=pentester fd=147u ip_version=4 dvc_id=1105708 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=48463 pid=698416 user=pentester fd=141u ip_version=4 dvc_id=1103274 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=47800 pid=698416 user=pentester fd=136u ip_version=4 dvc_id=1103381 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=x-www-browser dest_ip=* dest_port=53338 pid=698416 user=pentester fd=113u ip_version=4 dvc_id=1104205 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=updog dest_ip=* dest_port=9090 pid=697244 user=pentester fd=3u ip_version=4 dvc_id=812253 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77979 user=xrdp fd=11u ip_version=6 dvc_id=95549 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76654 user=root fd=7u ip_version=6 dvc_id=91537 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76654 user=root fd=6u ip_version=4 dvc_id=91527 transport=TCP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76553 user=root fd=7u ip_version=4 dvc_id=91009 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=707 user=root fd=7u ip_version=4 dvc_id=942 transport=UDP


_raw: Sat Oct 18 11:44:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=1660 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp     8080
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 11:44:44 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78326 user=xrdp fd=11u ip_version=6 dvc_id=95514 transport=TCP


_raw: Sat Oct 18 11:44:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77063 user=root fd=7u ip_version=6 dvc_id=92519 transport=TCP


_raw: Sat Oct 18 11:44:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77063 user=root fd=6u ip_version=4 dvc_id=92517 transport=TCP


_raw: Sat Oct 18 11:44:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76962 user=root fd=7u ip_version=4 dvc_id=90703 transport=UDP


_raw: Sat Oct 18 11:44:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4506 transport=UDP


_raw: Sat Oct 18 11:44:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=4484 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    46382
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 11:44:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=46382 pid=695190 user=pentester fd=73u ip_version=4 dvc_id=858950 transport=UDP


_raw: Sat Oct 18 11:44:40 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95384 transport=TCP


_raw: Sat Oct 18 11:44:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=7u ip_version=6 dvc_id=90832 transport=TCP


_raw: Sat Oct 18 11:44:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=6u ip_version=4 dvc_id=90830 transport=TCP


_raw: Sat Oct 18 11:44:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76529 user=root fd=7u ip_version=4 dvc_id=89061 transport=UDP


_raw: Sat Oct 18 11:44:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw: Sat Oct 18 11:44:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2954 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:44:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=94745 transport=TCP


_raw: Sat Oct 18 11:44:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76795 user=root fd=7u ip_version=6 dvc_id=91498 transport=TCP


_raw: Sat Oct 18 11:44:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76795 user=root fd=6u ip_version=4 dvc_id=91488 transport=TCP


_raw: Sat Oct 18 11:44:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76694 user=root fd=7u ip_version=4 dvc_id=93419 transport=UDP


_raw: Sat Oct 18 11:44:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4227 transport=UDP


_raw: Sat Oct 18 11:44:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3498 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     6666
tcp     1080
tcp     9389
tcp      445
tcp     9090
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:44:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78363 user=xrdp fd=11u ip_version=6 dvc_id=94672 transport=TCP


_raw: Sat Oct 18 11:44:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=7u ip_version=6 dvc_id=90053 transport=TCP


_raw: Sat Oct 18 11:44:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=6u ip_version=4 dvc_id=90051 transport=TCP


_raw: Sat Oct 18 11:44:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76946 user=root fd=7u ip_version=4 dvc_id=92362 transport=UDP


_raw: Sat Oct 18 11:44:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=2845 transport=UDP


_raw: Sat Oct 18 11:44:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1583 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:44:35 EDT 2025 app=python3 dest_ip=* dest_port=6666 pid=711151 user=root fd=8u ip_version=4 dvc_id=883340 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=python3 dest_ip=* dest_port=9389 pid=711151 user=root fd=7u ip_version=4 dvc_id=882576 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=711151 user=root fd=6u ip_version=4 dvc_id=882575 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=9090 pid=711151 user=root fd=5u ip_version=4 dvc_id=883337 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=711151 user=root fd=4u ip_version=4 dvc_id=881482 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=1080 pid=711151 user=root fd=3u ip_version=4 dvc_id=881481 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=694911 user=pentester fd=217u ip_version=4 dvc_id=829224 transport=UDP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78014 user=xrdp fd=11u ip_version=6 dvc_id=95181 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=7u ip_version=6 dvc_id=89671 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=6u ip_version=4 dvc_id=89661 transport=TCP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76524 user=root fd=7u ip_version=4 dvc_id=90882 transport=UDP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 11:44:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4213 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=30u ip_version=4 dvc_id=862461 transport=TCP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=29u ip_version=4 dvc_id=862460 transport=TCP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=28u ip_version=6 dvc_id=862459 transport=TCP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=27u ip_version=6 dvc_id=862458 transport=TCP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=138 pid=718710 user=root fd=17u ip_version=4 dvc_id=859993 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=138 pid=718710 user=root fd=16u ip_version=4 dvc_id=859992 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=137 pid=718710 user=root fd=15u ip_version=4 dvc_id=859991 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=137 pid=718710 user=root fd=14u ip_version=4 dvc_id=859990 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=nmbd dest_ip=* dest_port=138 pid=718710 user=root fd=13u ip_version=4 dvc_id=859979 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=nmbd dest_ip=* dest_port=137 pid=718710 user=root fd=12u ip_version=4 dvc_id=859978 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77884 user=xrdp fd=11u ip_version=6 dvc_id=96345 transport=TCP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=88988 transport=TCP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=88978 transport=TCP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76525 user=root fd=7u ip_version=4 dvc_id=89807 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=488 transport=UDP


_raw: Sat Oct 18 11:44:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1608 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      137
udp      137
udp      137
udp      138
udp      138
udp      138
tcp      139
tcp       22
tcp      445
tcp      139
tcp       22
tcp      445
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:44:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77990 user=xrdp fd=11u ip_version=6 dvc_id=94139 transport=TCP


_raw: Sat Oct 18 11:44:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=7u ip_version=6 dvc_id=90611 transport=TCP


_raw: Sat Oct 18 11:44:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=6u ip_version=4 dvc_id=90609 transport=TCP


_raw: Sat Oct 18 11:44:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76632 user=root fd=7u ip_version=4 dvc_id=91722 transport=UDP


_raw: Sat Oct 18 11:44:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3611 transport=UDP


_raw: Sat Oct 18 11:44:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4119 transport=UDP


_raw: Sat Oct 18 11:44:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77820 user=xrdp fd=11u ip_version=6 dvc_id=94694 transport=TCP


_raw: Sat Oct 18 11:44:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=7u ip_version=6 dvc_id=89688 transport=TCP


_raw: Sat Oct 18 11:44:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=6u ip_version=4 dvc_id=89686 transport=TCP


_raw: Sat Oct 18 11:44:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76467 user=root fd=7u ip_version=4 dvc_id=89631 transport=UDP


_raw: Sat Oct 18 11:44:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=546 transport=UDP


_raw: Sat Oct 18 11:44:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=3004 pid=735347 user=root fd=7u ip_version=4 dvc_id=1012142 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=732634 user=root fd=7u ip_version=4 dvc_id=1001767 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=732626 user=root fd=7u ip_version=4 dvc_id=1003530 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=3003 pid=730336 user=root fd=7u ip_version=6 dvc_id=994841 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=3003 pid=730329 user=root fd=7u ip_version=4 dvc_id=994840 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=3001 pid=728299 user=root fd=7u ip_version=6 dvc_id=990222 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=3001 pid=728294 user=root fd=7u ip_version=4 dvc_id=990221 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=728188 user=root fd=7u ip_version=6 dvc_id=987103 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=728182 user=root fd=7u ip_version=4 dvc_id=987102 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=728097 user=root fd=7u ip_version=6 dvc_id=987446 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=728090 user=root fd=7u ip_version=4 dvc_id=987445 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728081 user=root fd=7u ip_version=6 dvc_id=987419 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728075 user=root fd=7u ip_version=4 dvc_id=987418 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727790 user=root fd=7u ip_version=6 dvc_id=986002 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727783 user=root fd=7u ip_version=4 dvc_id=986001 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717116 user=root fd=7u ip_version=6 dvc_id=944991 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717109 user=root fd=7u ip_version=4 dvc_id=944990 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78080 user=xrdp fd=11u ip_version=6 dvc_id=96453 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=7u ip_version=6 dvc_id=91396 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=6u ip_version=4 dvc_id=91394 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76647 user=root fd=7u ip_version=4 dvc_id=88050 transport=UDP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=996 transport=UDP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2751 transport=UDP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=9836 user=pentester fd=37u ip_version=6 dvc_id=65446 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38057 pid=9836 user=pentester fd=16u ip_version=6 dvc_id=63384 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=x-www-browser dest_ip=* dest_port=56775 pid=3078 user=pentester fd=171u ip_version=4 dvc_id=98650 transport=UDP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=x-www-browser dest_ip=* dest_port=39597 pid=3078 user=pentester fd=140u ip_version=4 dvc_id=98449 transport=UDP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=940 user=xrdp fd=11u ip_version=6 dvc_id=824 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=7u ip_version=6 dvc_id=4605 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=6u ip_version=4 dvc_id=4603 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=39763 pid=892 user=root fd=9u ip_version=4 dvc_id=4661 transport=TCP


_raw: Sat Oct 18 11:44:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=664 user=root fd=7u ip_version=4 dvc_id=3825 transport=UDP


_raw:
Proto   Port
udp    48463
udp       68
udp       68
udp       68
tcp     9090
tcp      443
tcp       22
tcp       80
tcp     3350
tcp    38179
tcp       22
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=718339 user=root fd=36u ip_version=6 dvc_id=840612 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=718339 user=root fd=35u ip_version=6 dvc_id=842627 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=718339 user=root fd=34u ip_version=6 dvc_id=844798 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=718339 user=root fd=33u ip_version=6 dvc_id=842626 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=718339 user=root fd=32u ip_version=6 dvc_id=840611 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=718339 user=root fd=31u ip_version=6 dvc_id=840610 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=718339 user=root fd=30u ip_version=6 dvc_id=842625 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=718339 user=root fd=29u ip_version=6 dvc_id=842624 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=718339 user=root fd=28u ip_version=6 dvc_id=842623 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=718339 user=root fd=27u ip_version=6 dvc_id=840609 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=718339 user=root fd=26u ip_version=6 dvc_id=844797 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=718339 user=root fd=25u ip_version=6 dvc_id=840608 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=718339 user=root fd=24u ip_version=6 dvc_id=840607 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=718339 user=root fd=23u ip_version=6 dvc_id=843078 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=718339 user=root fd=22u ip_version=6 dvc_id=840606 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=718339 user=root fd=21u ip_version=6 dvc_id=844795 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=718339 user=root fd=20u ip_version=6 dvc_id=844796 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=10.0.254.205 dest_port=443 pid=718339 user=root fd=19u ip_version=4 dvc_id=842622 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=718339 user=root fd=18u ip_version=6 dvc_id=842621 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=718339 user=root fd=14u ip_version=6 dvc_id=844794 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=718339 user=root fd=13u ip_version=6 dvc_id=843077 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=45495 pid=718339 user=root fd=12u ip_version=6 dvc_id=842618 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=718339 user=root fd=11u ip_version=6 dvc_id=843076 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=718339 user=root fd=10u ip_version=6 dvc_id=842616 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=718339 user=root fd=9u ip_version=6 dvc_id=843075 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=718339 user=root fd=8u ip_version=6 dvc_id=842614 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=718339 user=root fd=7u ip_version=6 dvc_id=844793 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=718339 user=root fd=6u ip_version=6 dvc_id=843073 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78193 user=xrdp fd=11u ip_version=6 dvc_id=95559 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=7u ip_version=6 dvc_id=89076 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=6u ip_version=4 dvc_id=89074 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76818 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3667 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4216 transport=UDP


_raw:
Proto   Port
udp    56775
udp       68
udp    39597
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Sat Oct 18 11:44:22 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715926 user=pentester fd=37u ip_version=6 dvc_id=854060 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45661 pid=715926 user=pentester fd=16u ip_version=6 dvc_id=854051 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77938 user=xrdp fd=11u ip_version=6 dvc_id=96351 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=7u ip_version=6 dvc_id=91458 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=6u ip_version=4 dvc_id=91456 transport=TCP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76582 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=3573 transport=UDP


_raw: Sat Oct 18 11:44:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=5146 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     3389
tcp     1433
tcp     1883
tcp     5985
tcp     5986
tcp      139
tcp      143
tcp      135
tcp       25
tcp       21
tcp       22
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp    45495
tcp     3350
tcp      587
tcp      636


_raw: Sat Oct 18 11:44:18 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726263 user=pentester fd=37u ip_version=6 dvc_id=967490 transport=TCP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38003 pid=726263 user=pentester fd=16u ip_version=6 dvc_id=965488 transport=TCP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=firefox-esr dest_ip=* dest_port=38975 pid=723862 user=pentester fd=164u ip_version=4 dvc_id=1028516 transport=UDP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=firefox-esr dest_ip=* dest_port=55089 pid=723862 user=pentester fd=97u ip_version=4 dvc_id=1026375 transport=UDP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77878 user=xrdp fd=11u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=7u ip_version=6 dvc_id=89945 transport=TCP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=6u ip_version=4 dvc_id=89943 transport=TCP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76488 user=root fd=7u ip_version=4 dvc_id=90481 transport=UDP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4267 transport=UDP


_raw: Sat Oct 18 11:44:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1011 transport=UDP


_raw:
Proto   Port
udp    55089
udp    38975
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp    38003
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw: Sat Oct 18 11:44:16 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=14237 user=pentester fd=37u ip_version=6 dvc_id=81843 transport=TCP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41205 pid=14237 user=pentester fd=14u ip_version=6 dvc_id=84268 transport=TCP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=firefox-esr dest_ip=* dest_port=55771 pid=4137 user=pentester fd=121u ip_version=4 dvc_id=94958 transport=UDP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=kdeconnectd dest_ip=* dest_port=53879 pid=2183 user=pentester fd=23u ip_version=6 dvc_id=11661 transport=UDP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=kdeconnectd dest_ip=* dest_port=33773 pid=2183 user=pentester fd=22u ip_version=4 dvc_id=11660 transport=UDP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=21u ip_version=6 dvc_id=11658 transport=UDP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=20u ip_version=4 dvc_id=11657 transport=UDP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=19u ip_version=6 dvc_id=12794 transport=TCP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=18u ip_version=6 dvc_id=12793 transport=UDP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=934 user=xrdp fd=11u ip_version=6 dvc_id=5378 transport=TCP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=7u ip_version=6 dvc_id=4586 transport=TCP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=6u ip_version=4 dvc_id=4576 transport=TCP


_raw: Sat Oct 18 11:44:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=667 user=root fd=7u ip_version=4 dvc_id=760 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 11:44:14 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78073 user=xrdp fd=11u ip_version=6 dvc_id=95019 transport=TCP


_raw: Sat Oct 18 11:44:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76744 user=root fd=7u ip_version=6 dvc_id=91366 transport=TCP


_raw: Sat Oct 18 11:44:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76744 user=root fd=6u ip_version=4 dvc_id=91364 transport=TCP


_raw: Sat Oct 18 11:44:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76643 user=root fd=7u ip_version=4 dvc_id=88998 transport=UDP


_raw: Sat Oct 18 11:44:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=922 transport=UDP


_raw: Sat Oct 18 11:44:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=3636 transport=UDP


_raw:
Proto   Port
udp    35191
udp       68
udp       68
udp       68
udp    42497
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:44:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78058 user=xrdp fd=11u ip_version=6 dvc_id=95114 transport=TCP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=92229 transport=TCP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=92166 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=579 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=47658 pid=696530 user=pentester fd=135u ip_version=4 dvc_id=878816 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=34800 pid=696530 user=pentester fd=134u ip_version=4 dvc_id=879892 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=57249 pid=696530 user=pentester fd=115u ip_version=4 dvc_id=879888 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=48791 pid=696530 user=pentester fd=114u ip_version=4 dvc_id=876332 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=54928 pid=696530 user=pentester fd=113u ip_version=4 dvc_id=878788 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=43426 pid=696530 user=pentester fd=110u ip_version=4 dvc_id=879690 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=49849 pid=696530 user=pentester fd=109u ip_version=4 dvc_id=879689 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=43216 pid=696530 user=pentester fd=108u ip_version=4 dvc_id=877792 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=x-www-browser dest_ip=* dest_port=54334 pid=696530 user=pentester fd=107u ip_version=4 dvc_id=877779 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77857 user=xrdp fd=11u ip_version=6 dvc_id=95552 transport=TCP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=7u ip_version=6 dvc_id=91239 transport=TCP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=6u ip_version=4 dvc_id=91237 transport=TCP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76482 user=root fd=7u ip_version=4 dvc_id=91145 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=1744 transport=UDP


_raw: Sat Oct 18 11:44:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=625 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:44:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77914 user=xrdp fd=11u ip_version=6 dvc_id=95597 transport=TCP


_raw: Sat Oct 18 11:44:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=91656 transport=TCP


_raw: Sat Oct 18 11:44:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=91654 transport=TCP


_raw: Sat Oct 18 11:44:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76509 user=root fd=7u ip_version=4 dvc_id=90037 transport=UDP


_raw: Sat Oct 18 11:44:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=5139 transport=UDP


_raw: Sat Oct 18 11:44:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=4199 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:44:04 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77974 user=xrdp fd=11u ip_version=6 dvc_id=93705 transport=TCP


_raw: Sat Oct 18 11:44:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=92193 transport=TCP


_raw: Sat Oct 18 11:44:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=92191 transport=TCP


_raw: Sat Oct 18 11:44:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=89070 transport=UDP


_raw: Sat Oct 18 11:44:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4280 transport=UDP


_raw: Sat Oct 18 11:44:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3762 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=39353 pid=723874 user=pentester fd=36u ip_version=4 dvc_id=872019 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=721701 user=pentester fd=37u ip_version=6 dvc_id=859538 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33733 pid=721701 user=pentester fd=16u ip_version=6 dvc_id=860698 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=x-www-browser dest_ip=* dest_port=47066 pid=716070 user=pentester fd=132u ip_version=4 dvc_id=896898 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=x-www-browser dest_ip=* dest_port=48176 pid=716070 user=pentester fd=126u ip_version=4 dvc_id=896876 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=x-www-browser dest_ip=* dest_port=33585 pid=716070 user=pentester fd=124u ip_version=4 dvc_id=898976 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=x-www-browser dest_ip=* dest_port=36867 pid=716070 user=pentester fd=120u ip_version=4 dvc_id=899747 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=x-www-browser dest_ip=* dest_port=41911 pid=716070 user=pentester fd=91u ip_version=4 dvc_id=897700 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77926 user=xrdp fd=11u ip_version=6 dvc_id=95531 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90892 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90890 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=92282 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=2805 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2790 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78248 user=xrdp fd=11u ip_version=6 dvc_id=95164 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=7u ip_version=6 dvc_id=91547 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=6u ip_version=4 dvc_id=91545 transport=TCP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76847 user=root fd=7u ip_version=4 dvc_id=91483 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2893 transport=UDP


_raw: Sat Oct 18 11:44:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=3938 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    37351
tcp     3350
tcp       22
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     6666
tcp     1080
tcp     9389
tcp      445
tcp     9090
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:44:00 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715382 user=pentester fd=37u ip_version=6 dvc_id=941126 transport=TCP


_raw: Sat Oct 18 11:44:00 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37351 pid=715382 user=pentester fd=16u ip_version=6 dvc_id=932840 transport=TCP


_raw: Sat Oct 18 11:44:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77903 user=xrdp fd=11u ip_version=6 dvc_id=91997 transport=TCP


_raw: Sat Oct 18 11:44:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76570 user=root fd=7u ip_version=6 dvc_id=89069 transport=TCP


_raw: Sat Oct 18 11:44:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76570 user=root fd=6u ip_version=4 dvc_id=89059 transport=TCP


_raw: Sat Oct 18 11:44:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76469 user=root fd=7u ip_version=4 dvc_id=88979 transport=UDP


_raw: Sat Oct 18 11:44:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1519 transport=UDP


_raw: Sat Oct 18 11:44:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4230 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     1883
tcp     5432
tcp       22
tcp     6379
tcp     3389
tcp     3350
tcp     6379
tcp     1883
tcp     5432
tcp       22


_raw: Sat Oct 18 11:43:56 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=722742 user=postgres fd=7u ip_version=4 dvc_id=886146 transport=TCP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=redis-server dest_ip=127.0.0.1 dest_port=6379 pid=721622 user=redis fd=8u ip_version=4 dvc_id=873373 transport=TCP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=721232 user=mosquitto fd=5u ip_version=4 dvc_id=870055 transport=TCP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78056 user=xrdp fd=11u ip_version=6 dvc_id=94759 transport=TCP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=7u ip_version=6 dvc_id=90769 transport=TCP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=6u ip_version=4 dvc_id=90759 transport=TCP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76695 user=root fd=7u ip_version=4 dvc_id=89933 transport=UDP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=458 transport=UDP


_raw: Sat Oct 18 11:43:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=1673 transport=UDP


_raw:
Proto   Port
udp    40754
udp       68
udp       68
udp       68
udp    33347
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:43:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77925 user=xrdp fd=11u ip_version=6 dvc_id=93793 transport=TCP


_raw: Sat Oct 18 11:43:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=7u ip_version=6 dvc_id=90586 transport=TCP


_raw: Sat Oct 18 11:43:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=6u ip_version=4 dvc_id=90584 transport=TCP


_raw: Sat Oct 18 11:43:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76479 user=root fd=7u ip_version=4 dvc_id=90009 transport=UDP


_raw: Sat Oct 18 11:43:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2849 transport=UDP


_raw: Sat Oct 18 11:43:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:43:50 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77856 user=xrdp fd=11u ip_version=6 dvc_id=95414 transport=TCP


_raw: Sat Oct 18 11:43:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=7u ip_version=6 dvc_id=89956 transport=TCP


_raw: Sat Oct 18 11:43:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=6u ip_version=4 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 11:43:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76497 user=root fd=7u ip_version=4 dvc_id=91466 transport=UDP


_raw: Sat Oct 18 11:43:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=2707 transport=UDP


_raw: Sat Oct 18 11:43:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     5432
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 11:43:47 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=694384 user=postgres fd=7u ip_version=4 dvc_id=814386 transport=TCP


_raw: Sat Oct 18 11:43:47 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78019 user=xrdp fd=11u ip_version=6 dvc_id=92973 transport=TCP


_raw: Sat Oct 18 11:43:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=89597 transport=TCP


_raw: Sat Oct 18 11:43:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=89595 transport=TCP


_raw: Sat Oct 18 11:43:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76586 user=root fd=7u ip_version=4 dvc_id=89527 transport=UDP


_raw: Sat Oct 18 11:43:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=486 transport=UDP


_raw: Sat Oct 18 11:43:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4189 transport=UDP


_raw:
Proto   Port
udp    41550
udp    39225
udp    47989
udp    44635
udp    36740
udp    53141
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp    45637
tcp      636
tcp     3350
tcp     1433
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=739244 user=root fd=36u ip_version=6 dvc_id=956583 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=739244 user=root fd=35u ip_version=6 dvc_id=955237 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=739244 user=root fd=34u ip_version=6 dvc_id=956582 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=739244 user=root fd=33u ip_version=6 dvc_id=956581 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=739244 user=root fd=32u ip_version=6 dvc_id=956580 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=739244 user=root fd=31u ip_version=6 dvc_id=955236 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=739244 user=root fd=30u ip_version=6 dvc_id=955235 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=739244 user=root fd=29u ip_version=6 dvc_id=955234 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=739244 user=root fd=28u ip_version=6 dvc_id=957704 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=739244 user=root fd=27u ip_version=6 dvc_id=957703 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=739244 user=root fd=26u ip_version=6 dvc_id=955882 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=739244 user=root fd=25u ip_version=6 dvc_id=956579 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=739244 user=root fd=24u ip_version=4 dvc_id=955233 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=739244 user=root fd=23u ip_version=6 dvc_id=956577 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=739244 user=root fd=22u ip_version=6 dvc_id=955232 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=739244 user=root fd=21u ip_version=6 dvc_id=955231 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=739244 user=root fd=20u ip_version=6 dvc_id=955230 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=739244 user=root fd=19u ip_version=6 dvc_id=956578 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=739244 user=root fd=18u ip_version=6 dvc_id=955229 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=739244 user=root fd=14u ip_version=6 dvc_id=957700 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=739244 user=root fd=13u ip_version=6 dvc_id=957699 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=45637 pid=739244 user=root fd=12u ip_version=6 dvc_id=955881 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=739244 user=root fd=11u ip_version=6 dvc_id=956576 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=739244 user=root fd=10u ip_version=6 dvc_id=956574 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=739244 user=root fd=9u ip_version=6 dvc_id=955228 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=739244 user=root fd=8u ip_version=6 dvc_id=957697 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=739244 user=root fd=7u ip_version=6 dvc_id=955227 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=739244 user=root fd=6u ip_version=6 dvc_id=956572 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96478 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=7u ip_version=6 dvc_id=92354 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=6u ip_version=4 dvc_id=92352 transport=TCP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76679 user=root fd=7u ip_version=4 dvc_id=90433 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4163 transport=UDP


_raw: Sat Oct 18 11:43:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=820 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    59808
udp    36167
tcp       22
tcp     3350
tcp       22
tcp    35939
tcp     3389
tcp     3000


_raw: Sat Oct 18 11:43:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77992 user=xrdp fd=11u ip_version=6 dvc_id=96357 transport=TCP


_raw: Sat Oct 18 11:43:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=89778 transport=TCP


_raw: Sat Oct 18 11:43:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=89776 transport=TCP


_raw: Sat Oct 18 11:43:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=90671 transport=UDP


_raw: Sat Oct 18 11:43:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=804 transport=UDP


_raw: Sat Oct 18 11:43:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2658 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:43:40 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77950 user=xrdp fd=11u ip_version=6 dvc_id=93046 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76662 user=root fd=7u ip_version=6 dvc_id=92215 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76662 user=root fd=6u ip_version=4 dvc_id=92205 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76561 user=root fd=7u ip_version=4 dvc_id=90749 transport=UDP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4006 transport=UDP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4150 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:43:40 EDT 2025 app=node dest_ip=* dest_port=3000 pid=718281 user=pentester fd=29u ip_version=6 dvc_id=850239 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=59808 pid=717749 user=pentester fd=134u ip_version=4 dvc_id=867790 transport=UDP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=36167 pid=717749 user=pentester fd=123u ip_version=4 dvc_id=867793 transport=UDP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=35939 pid=717672 user=pentester fd=16u ip_version=6 dvc_id=844300 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78126 user=xrdp fd=11u ip_version=6 dvc_id=95530 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76823 user=root fd=7u ip_version=6 dvc_id=90853 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76823 user=root fd=6u ip_version=4 dvc_id=90851 transport=TCP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76722 user=root fd=7u ip_version=4 dvc_id=87889 transport=UDP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=1822 transport=UDP


_raw: Sat Oct 18 11:43:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1806 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     1883
tcp     5432
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw: Sat Oct 18 11:43:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95733 transport=TCP


_raw: Sat Oct 18 11:43:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=7u ip_version=6 dvc_id=90801 transport=TCP


_raw: Sat Oct 18 11:43:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=6u ip_version=4 dvc_id=90799 transport=TCP