_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp    33691
udp    59221
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     4444
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     8000
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    58448
udp     5353
udp       68
udp       68
udp       68
udp    60750
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    35119


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     3333
tcp     8889
tcp       22
tcp     3389
tcp       80
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw:
Proto   Port
udp    47641
udp    59990
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     8080
tcp     3389
tcp    43527
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp    36245
tcp       22
tcp     8889
tcp     6010
tcp     6011
tcp     6011
tcp     6010
tcp     3389
tcp     8080
tcp    41839
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     8080
tcp     3389
tcp       22
tcp    38305


_raw:
Proto   Port
udp    36887
udp       68
udp       68
udp       68
udp    52221
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp     8080
tcp       22
tcp    33349


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp    55554
tcp       22
tcp     3389
tcp     3350
tcp    39201
tcp       22
tcp     8080


_raw:
Proto   Port
udp    50483
udp    53119
udp    40969
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    43409
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    41232
udp    58066
udp    42169
tcp       22
tcp     5432
tcp     8889
tcp       22
tcp     3350
tcp     7687
tcp     7474
tcp     3389
tcp     5432


_raw:
Proto   Port
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    38742
udp    35939
udp    44240
udp    49013
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     8080
tcp     3389
tcp    42561
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     5432
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    53745
udp    33690
tcp     8080
tcp     8889
tcp     5432
tcp       22
tcp     3389
tcp     7474
tcp     2112
tcp     5432
tcp     7687
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp    35939
tcp     3389
tcp     3000


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp    44779
tcp     8889
tcp       22
tcp       80
tcp      443
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 14:56:03 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=756710 user=root fd=13u ip_version=4 dvc_id=1192637 transport=TCP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=714819 user=postgres fd=7u ip_version=4 dvc_id=946209 transport=TCP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=714805 user=mosquitto fd=5u ip_version=4 dvc_id=946193 transport=TCP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78125 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76786 user=root fd=7u ip_version=6 dvc_id=91469 transport=TCP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76786 user=root fd=6u ip_version=4 dvc_id=91467 transport=TCP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76653 user=root fd=7u ip_version=4 dvc_id=91412 transport=UDP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=725 transport=UDP


_raw: Sat Oct 18 14:56:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3671 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     1883
tcp     3350
tcp       22
tcp     5432
tcp     1883
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 14:56:01 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=730693 user=root fd=13u ip_version=4 dvc_id=863639 transport=TCP


_raw: Sat Oct 18 14:56:01 EDT 2025 app=python3 dest_ip=* dest_port=8000 pid=719139 user=root fd=3u ip_version=4 dvc_id=839501 transport=TCP


_raw: Sat Oct 18 14:56:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=94104 transport=TCP


_raw: Sat Oct 18 14:56:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=7u ip_version=6 dvc_id=90403 transport=TCP


_raw: Sat Oct 18 14:56:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=6u ip_version=4 dvc_id=90401 transport=TCP


_raw: Sat Oct 18 14:56:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=93226 transport=UDP


_raw: Sat Oct 18 14:56:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2720 transport=UDP


_raw: Sat Oct 18 14:56:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4056 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp     8889
tcp       22
tcp     3389
tcp     1433
tcp    43193
tcp     1883
tcp     5985
tcp     5986
tcp      135
tcp      139
tcp      143
tcp       21
tcp       22
tcp       25
tcp       53
tcp       80
tcp     3350
tcp       88
tcp      110
tcp      389
tcp      443
tcp      445
tcp     8080
tcp    45749
tcp      587
tcp      636


_raw: Sat Oct 18 14:56:00 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=723528 user=root fd=13u ip_version=4 dvc_id=878646 transport=TCP


_raw: Sat Oct 18 14:56:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77998 user=xrdp fd=11u ip_version=6 dvc_id=92996 transport=TCP


_raw: Sat Oct 18 14:56:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76668 user=root fd=7u ip_version=6 dvc_id=88705 transport=TCP


_raw: Sat Oct 18 14:56:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76668 user=root fd=6u ip_version=4 dvc_id=88703 transport=TCP


_raw: Sat Oct 18 14:56:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76552 user=root fd=7u ip_version=4 dvc_id=90065 transport=UDP


_raw: Sat Oct 18 14:56:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=781 transport=UDP


_raw: Sat Oct 18 14:56:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1793 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=761652 user=pentester fd=15u ip_version=6 dvc_id=1190383 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=43193 pid=761652 user=pentester fd=8u ip_version=6 dvc_id=1190365 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=731604 user=root fd=13u ip_version=4 dvc_id=937661 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=720758 user=root fd=36u ip_version=6 dvc_id=905262 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=720758 user=root fd=35u ip_version=6 dvc_id=903672 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=720758 user=root fd=34u ip_version=6 dvc_id=905261 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=720758 user=root fd=33u ip_version=6 dvc_id=903671 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=720758 user=root fd=32u ip_version=6 dvc_id=903670 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=720758 user=root fd=31u ip_version=6 dvc_id=905260 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=720758 user=root fd=30u ip_version=6 dvc_id=903669 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=720758 user=root fd=29u ip_version=6 dvc_id=902915 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=720758 user=root fd=28u ip_version=6 dvc_id=905259 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=720758 user=root fd=27u ip_version=6 dvc_id=904515 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=720758 user=root fd=26u ip_version=6 dvc_id=904514 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=720758 user=root fd=25u ip_version=6 dvc_id=904513 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=720758 user=root fd=24u ip_version=4 dvc_id=904516 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=720758 user=root fd=23u ip_version=6 dvc_id=905258 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=720758 user=root fd=22u ip_version=6 dvc_id=904512 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=720758 user=root fd=21u ip_version=6 dvc_id=903668 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=720758 user=root fd=20u ip_version=6 dvc_id=902914 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=720758 user=root fd=19u ip_version=6 dvc_id=904511 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=720758 user=root fd=18u ip_version=6 dvc_id=904510 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=720758 user=root fd=14u ip_version=6 dvc_id=904509 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=720758 user=root fd=13u ip_version=6 dvc_id=903667 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=720758 user=root fd=12u ip_version=6 dvc_id=904508 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=45749 pid=720758 user=root fd=11u ip_version=6 dvc_id=905255 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=720758 user=root fd=10u ip_version=6 dvc_id=904506 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=720758 user=root fd=9u ip_version=6 dvc_id=904505 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=720758 user=root fd=8u ip_version=6 dvc_id=903665 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=720758 user=root fd=7u ip_version=6 dvc_id=903664 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=720758 user=root fd=6u ip_version=6 dvc_id=904503 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=x-www-browser dest_ip=* dest_port=46784 pid=697246 user=pentester fd=93u ip_version=4 dvc_id=1203856 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=x-www-browser dest_ip=* dest_port=37060 pid=697246 user=pentester fd=91u ip_version=4 dvc_id=1203857 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=95557 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76630 user=root fd=7u ip_version=6 dvc_id=91692 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76630 user=root fd=6u ip_version=4 dvc_id=91690 transport=TCP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76514 user=root fd=7u ip_version=4 dvc_id=89652 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4208 transport=UDP


_raw: Sat Oct 18 14:55:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=817 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Sat Oct 18 14:55:57 EDT 2025 app=python dest_ip=* dest_port=8000 pid=803391 user=pentester fd=3u ip_version=4 dvc_id=1459567 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=759861 user=_gvm fd=4u ip_version=4 dvc_id=1082657 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=759856 user=_gvm fd=4u ip_version=4 dvc_id=1082097 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=758907 user=root fd=13u ip_version=4 dvc_id=1079742 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=728784 user=mosquitto fd=5u ip_version=4 dvc_id=873749 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=726857 user=postgres fd=7u ip_version=4 dvc_id=865780 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=chromium dest_ip=10.0.254.204 dest_port=34400 pid=714924 user=pentester fd=227u ip_version=4 dvc_id=1866866 transport=UDP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=714924 user=pentester fd=171u ip_version=4 dvc_id=841877 transport=UDP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78373 user=xrdp fd=11u ip_version=6 dvc_id=97483 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=7u ip_version=6 dvc_id=90815 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=6u ip_version=4 dvc_id=90813 transport=TCP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77028 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw: Sat Oct 18 14:55:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4395 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     9392
tcp     8000
tcp     5432
tcp     1883
tcp       80
tcp     8889
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 14:55:51 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=735566 user=root fd=13u ip_version=4 dvc_id=1037691 transport=TCP


_raw: Sat Oct 18 14:55:51 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77857 user=xrdp fd=11u ip_version=6 dvc_id=95552 transport=TCP


_raw: Sat Oct 18 14:55:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=7u ip_version=6 dvc_id=91239 transport=TCP


_raw: Sat Oct 18 14:55:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=6u ip_version=4 dvc_id=91237 transport=TCP


_raw: Sat Oct 18 14:55:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76482 user=root fd=7u ip_version=4 dvc_id=91145 transport=UDP


_raw: Sat Oct 18 14:55:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=1744 transport=UDP


_raw: Sat Oct 18 14:55:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=625 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    45299
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     1883
tcp     3389
tcp     5432


_raw: Sat Oct 18 14:55:49 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=728603 user=root fd=13u ip_version=4 dvc_id=951250 transport=TCP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=714259 user=pentester fd=37u ip_version=6 dvc_id=883394 transport=TCP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45299 pid=714259 user=pentester fd=16u ip_version=6 dvc_id=884880 transport=TCP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78058 user=xrdp fd=11u ip_version=6 dvc_id=95114 transport=TCP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=92229 transport=TCP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=92166 transport=UDP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw: Sat Oct 18 14:55:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=579 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 14:55:48 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=742617 user=postgres fd=7u ip_version=4 dvc_id=1054272 transport=TCP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=742603 user=mosquitto fd=5u ip_version=4 dvc_id=1054230 transport=TCP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=735239 user=root fd=13u ip_version=4 dvc_id=1016474 transport=TCP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78150 user=xrdp fd=11u ip_version=6 dvc_id=96510 transport=TCP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76703 user=root fd=7u ip_version=6 dvc_id=88041 transport=TCP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76703 user=root fd=6u ip_version=4 dvc_id=88039 transport=TCP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92402 transport=UDP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=1005 transport=UDP


_raw: Sat Oct 18 14:55:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1632 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 14:55:47 EDT 2025 file_hash=SHA2-256(stdin)= b61fed04ee22e4779e5fe869cbc9a5bfb170bb617cbe4ca1c4f32cfb0a566da8


_raw: Sat Oct 18 14:55:47 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740222 user=root fd=13u ip_version=4 dvc_id=918862 transport=TCP


_raw: Sat Oct 18 14:55:47 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77943 user=xrdp fd=11u ip_version=6 dvc_id=94970 transport=TCP


_raw: Sat Oct 18 14:55:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=7u ip_version=6 dvc_id=89964 transport=TCP


_raw: Sat Oct 18 14:55:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=6u ip_version=4 dvc_id=89962 transport=TCP


_raw: Sat Oct 18 14:55:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92185 transport=UDP


_raw: Sat Oct 18 14:55:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2521 transport=UDP


_raw: Sat Oct 18 14:55:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3717 transport=UDP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734821 user=root fd=13u ip_version=4 dvc_id=917560 transport=TCP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=712800 user=pentester fd=222u ip_version=4 dvc_id=847249 transport=UDP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77995 user=xrdp fd=11u ip_version=6 dvc_id=95567 transport=TCP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=7u ip_version=6 dvc_id=91643 transport=TCP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=6u ip_version=4 dvc_id=91641 transport=TCP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76623 user=root fd=7u ip_version=4 dvc_id=89678 transport=UDP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3662 transport=UDP


_raw: Sat Oct 18 14:55:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=580 transport=UDP


_raw:
Proto   Port
udp     5353
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp     8080
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 14:55:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=840394 user=root fd=13u ip_version=4 dvc_id=4453292 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=9392 pid=703709 user=root fd=4u ip_version=4 dvc_id=874097 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=40419 pid=699779 user=root fd=7u ip_version=4 dvc_id=858870 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=95039 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=91797 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=91795 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90585 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4009 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4226 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=793733 user=root fd=13u ip_version=4 dvc_id=1107373 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=701558 user=root fd=7u ip_version=4 dvc_id=841895 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=700947 user=root fd=7u ip_version=4 dvc_id=837485 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=700940 user=root fd=7u ip_version=4 dvc_id=839686 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77959 user=xrdp fd=11u ip_version=6 dvc_id=96290 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=7u ip_version=6 dvc_id=91353 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76627 user=root fd=6u ip_version=4 dvc_id=91351 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76526 user=root fd=7u ip_version=4 dvc_id=90690 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4258 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739441 user=root fd=13u ip_version=4 dvc_id=965766 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95973 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=7u ip_version=6 dvc_id=89832 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=6u ip_version=4 dvc_id=89830 transport=TCP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=89004 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4122 transport=UDP


_raw: Sat Oct 18 14:55:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=1765 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 14:55:34 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=752176 user=pentester fd=37u ip_version=6 dvc_id=1010963 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42027 pid=752176 user=pentester fd=16u ip_version=6 dvc_id=1010914 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=736615 user=root fd=13u ip_version=4 dvc_id=946624 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=x-www-browser dest_ip=* dest_port=41855 pid=715343 user=pentester fd=96u ip_version=4 dvc_id=1079699 transport=UDP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=x-www-browser dest_ip=* dest_port=44589 pid=715343 user=pentester fd=90u ip_version=4 dvc_id=1077102 transport=UDP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78024 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=90581 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=90579 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76650 user=root fd=7u ip_version=4 dvc_id=91431 transport=UDP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3563 transport=UDP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4254 transport=UDP


_raw:
Proto   Port
udp    44589
udp       68
udp       68
udp       68
udp    41855
tcp     8889
tcp       22
tcp     3389
tcp    42027
tcp     8080
tcp     3350
tcp       22


_raw: Sat Oct 18 14:55:34 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734621 user=root fd=13u ip_version=4 dvc_id=931744 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=96268 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=89050 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=89048 transport=TCP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=90682 transport=UDP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4518 transport=UDP


_raw: Sat Oct 18 14:55:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2617 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    48511
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 14:55:27 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=744629 user=root fd=13u ip_version=4 dvc_id=953752 transport=TCP


_raw: Sat Oct 18 14:55:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78062 user=xrdp fd=11u ip_version=6 dvc_id=96395 transport=TCP


_raw: Sat Oct 18 14:55:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=7u ip_version=6 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 14:55:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=6u ip_version=4 dvc_id=91656 transport=TCP


_raw: Sat Oct 18 14:55:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76616 user=root fd=7u ip_version=4 dvc_id=90856 transport=UDP


_raw: Sat Oct 18 14:55:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4271 transport=UDP


_raw: Sat Oct 18 14:55:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3860 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 14:55:26 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741055 user=root fd=13u ip_version=4 dvc_id=952147 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77901 user=xrdp fd=11u ip_version=6 dvc_id=96589 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4147 transport=UDP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=4132 transport=UDP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=743430 user=root fd=13u ip_version=4 dvc_id=921129 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77898 user=xrdp fd=11u ip_version=6 dvc_id=96358 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=89751 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=89749 transport=TCP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91447 transport=UDP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 14:55:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=698 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp    48474
udp       68
udp    41526
tcp       80
tcp       22
tcp      443
tcp     9090
tcp     8889
tcp     3350
tcp     8080
tcp       22
tcp    43367
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      137
udp      137
udp      137
udp      138
udp      138
udp      138
udp    45296
udp    43016
tcp     8889
tcp      139
tcp       22
tcp      445
tcp      139
tcp       22
tcp      445
tcp     3350
tcp    42789
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
tcp     8080
tcp       22
tcp     5432
tcp     8889
tcp     7687
tcp     1433
tcp     1883
tcp     3350
tcp     5986
tcp     5985
tcp     7474
tcp       22
tcp       21
tcp       25
tcp       53
tcp       80
tcp       88
tcp      110
tcp      135
tcp      139
tcp      143
tcp      389
tcp      443
tcp      445
tcp    45663
tcp      587
tcp      636
tcp     3389
tcp     5432
tcp     2112


_raw: Sat Oct 18 14:55:16 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=747902 user=root fd=13u ip_version=4 dvc_id=1015352 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726453 user=pentester fd=37u ip_version=6 dvc_id=904211 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42789 pid=726453 user=pentester fd=16u ip_version=6 dvc_id=904195 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=30u ip_version=4 dvc_id=862461 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=29u ip_version=4 dvc_id=862460 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=28u ip_version=6 dvc_id=862459 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=27u ip_version=6 dvc_id=862458 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=138 pid=718710 user=root fd=17u ip_version=4 dvc_id=859993 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=138 pid=718710 user=root fd=16u ip_version=4 dvc_id=859992 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=137 pid=718710 user=root fd=15u ip_version=4 dvc_id=859991 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=137 pid=718710 user=root fd=14u ip_version=4 dvc_id=859990 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=nmbd dest_ip=* dest_port=138 pid=718710 user=root fd=13u ip_version=4 dvc_id=859979 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=nmbd dest_ip=* dest_port=137 pid=718710 user=root fd=12u ip_version=4 dvc_id=859978 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=x-www-browser dest_ip=* dest_port=45296 pid=712906 user=pentester fd=196u ip_version=4 dvc_id=1254624 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=x-www-browser dest_ip=* dest_port=43016 pid=712906 user=pentester fd=169u ip_version=4 dvc_id=1252317 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77884 user=xrdp fd=11u ip_version=6 dvc_id=96345 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=88988 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=88978 transport=TCP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76525 user=root fd=7u ip_version=4 dvc_id=89807 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=488 transport=UDP


_raw: Sat Oct 18 14:55:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1608 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     8889
tcp       22
tcp     5432
tcp     8080
tcp     3350
tcp    37181
tcp       22
tcp     3389
tcp     5432
tcp     2112
tcp     7474
tcp     7687


_raw: Sat Oct 18 14:55:15 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739761 user=root fd=13u ip_version=4 dvc_id=1075109 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78093 user=xrdp fd=11u ip_version=6 dvc_id=94642 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=7u ip_version=6 dvc_id=92378 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=6u ip_version=4 dvc_id=92376 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76689 user=root fd=7u ip_version=4 dvc_id=90574 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1561 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3965 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=735767 user=_bloodhound fd=8u ip_version=4 dvc_id=955491 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=bhapi dest_ip=* dest_port=2112 pid=735767 user=_bloodhound fd=6u ip_version=6 dvc_id=953909 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=734579 user=root fd=282u ip_version=6 dvc_id=949079 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=734579 user=root fd=281u ip_version=6 dvc_id=951390 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=734438 user=postgres fd=7u ip_version=4 dvc_id=947195 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=731351 user=root fd=13u ip_version=4 dvc_id=944041 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=717373 user=root fd=36u ip_version=6 dvc_id=895371 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=717373 user=root fd=35u ip_version=6 dvc_id=895370 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=717373 user=root fd=34u ip_version=6 dvc_id=895369 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=717373 user=root fd=33u ip_version=6 dvc_id=895368 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=717373 user=root fd=32u ip_version=6 dvc_id=895367 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=717373 user=root fd=31u ip_version=6 dvc_id=893571 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=717373 user=root fd=30u ip_version=6 dvc_id=894385 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=717373 user=root fd=29u ip_version=6 dvc_id=893572 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=717373 user=root fd=28u ip_version=6 dvc_id=895366 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=717373 user=root fd=27u ip_version=6 dvc_id=892659 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=717373 user=root fd=26u ip_version=6 dvc_id=892658 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=717373 user=root fd=25u ip_version=6 dvc_id=894384 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=717373 user=root fd=24u ip_version=6 dvc_id=893570 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=717373 user=root fd=23u ip_version=6 dvc_id=892657 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=717373 user=root fd=22u ip_version=6 dvc_id=895365 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=717373 user=root fd=21u ip_version=6 dvc_id=895364 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=717373 user=root fd=20u ip_version=6 dvc_id=895363 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=717373 user=root fd=19u ip_version=6 dvc_id=893569 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=717373 user=root fd=18u ip_version=4 dvc_id=892660 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=717373 user=root fd=14u ip_version=6 dvc_id=895362 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=717373 user=root fd=13u ip_version=6 dvc_id=895361 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=45663 pid=717373 user=root fd=12u ip_version=6 dvc_id=895360 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=717373 user=root fd=11u ip_version=6 dvc_id=895359 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=717373 user=root fd=10u ip_version=6 dvc_id=895358 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=717373 user=root fd=9u ip_version=6 dvc_id=892656 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=717373 user=root fd=8u ip_version=6 dvc_id=895356 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=717373 user=root fd=7u ip_version=6 dvc_id=892655 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=717373 user=root fd=6u ip_version=6 dvc_id=895354 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77992 user=xrdp fd=11u ip_version=6 dvc_id=96357 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=89778 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=89776 transport=TCP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=90671 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=804 transport=UDP


_raw: Sat Oct 18 14:55:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2658 transport=UDP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=733301 user=root fd=13u ip_version=4 dvc_id=981775 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=720237 user=_bloodhound fd=7u ip_version=4 dvc_id=904981 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=bhapi dest_ip=* dest_port=2112 pid=719491 user=_bloodhound fd=6u ip_version=6 dvc_id=908944 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=719045 user=root fd=282u ip_version=6 dvc_id=900616 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=719045 user=root fd=281u ip_version=6 dvc_id=900610 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=718955 user=postgres fd=7u ip_version=4 dvc_id=904283 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37181 pid=703595 user=pentester fd=16u ip_version=6 dvc_id=835237 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=696473 user=pentester fd=222u ip_version=4 dvc_id=855089 transport=UDP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77973 user=xrdp fd=11u ip_version=6 dvc_id=95395 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=7u ip_version=6 dvc_id=89887 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=6u ip_version=4 dvc_id=89885 transport=TCP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76514 user=root fd=7u ip_version=4 dvc_id=89845 transport=UDP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4343 transport=UDP


_raw: Sat Oct 18 14:55:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2834 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     6666
tcp     9389
tcp      445
tcp     8889
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 14:55:07 EDT 2025 app=python3 dest_ip=* dest_port=6666 pid=730997 user=root fd=6u ip_version=4 dvc_id=972236 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=python3 dest_ip=* dest_port=9389 pid=730997 user=root fd=5u ip_version=4 dvc_id=967569 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=730997 user=root fd=4u ip_version=4 dvc_id=970539 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=730997 user=root fd=3u ip_version=4 dvc_id=971295 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=730087 user=root fd=13u ip_version=4 dvc_id=969843 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=694911 user=pentester fd=217u ip_version=4 dvc_id=829224 transport=UDP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78014 user=xrdp fd=11u ip_version=6 dvc_id=95181 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=7u ip_version=6 dvc_id=89671 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=6u ip_version=4 dvc_id=89661 transport=TCP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76524 user=root fd=7u ip_version=4 dvc_id=90882 transport=UDP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 14:55:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4213 transport=UDP


_raw: Sat Oct 18 14:55:04 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734375 user=root fd=13u ip_version=4 dvc_id=891420 transport=TCP


_raw: Sat Oct 18 14:55:04 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=96590 transport=TCP


_raw: Sat Oct 18 14:55:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 14:55:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=89926 transport=TCP


_raw: Sat Oct 18 14:55:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89895 transport=UDP


_raw: Sat Oct 18 14:55:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=548 transport=UDP


_raw: Sat Oct 18 14:55:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=528 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8080
tcp     8889
tcp     5432
tcp     5432
tcp     7474
tcp       22
tcp     7687
tcp     3350
tcp     3389
tcp     2112


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 14:55:02 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=744422 user=root fd=13u ip_version=4 dvc_id=986410 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=725419 user=_bloodhound fd=8u ip_version=4 dvc_id=909184 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=bhapi dest_ip=* dest_port=2112 pid=725419 user=_bloodhound fd=6u ip_version=6 dvc_id=910425 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=724601 user=root fd=282u ip_version=6 dvc_id=906597 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=724601 user=root fd=281u ip_version=6 dvc_id=906591 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=724493 user=postgres fd=7u ip_version=4 dvc_id=906373 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77883 user=xrdp fd=11u ip_version=6 dvc_id=94500 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76569 user=root fd=7u ip_version=6 dvc_id=90505 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76569 user=root fd=6u ip_version=4 dvc_id=90503 transport=TCP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76469 user=root fd=7u ip_version=4 dvc_id=90452 transport=UDP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2585 transport=UDP


_raw: Sat Oct 18 14:55:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3992 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     8080
tcp    35469
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp       22
tcp     3350
tcp     5432
tcp     3389


_raw: Sat Oct 18 14:55:00 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=757625 user=pentester fd=37u ip_version=6 dvc_id=970056 transport=TCP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=35469 pid=757625 user=pentester fd=16u ip_version=6 dvc_id=967053 transport=TCP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739479 user=root fd=13u ip_version=4 dvc_id=920603 transport=TCP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77990 user=xrdp fd=11u ip_version=6 dvc_id=94139 transport=TCP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=7u ip_version=6 dvc_id=90611 transport=TCP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=6u ip_version=4 dvc_id=90609 transport=TCP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76632 user=root fd=7u ip_version=4 dvc_id=91722 transport=UDP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3611 transport=UDP


_raw: Sat Oct 18 14:55:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4119 transport=UDP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734705 user=root fd=13u ip_version=4 dvc_id=866063 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78131 user=xrdp fd=11u ip_version=6 dvc_id=94741 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=7u ip_version=6 dvc_id=93230 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=6u ip_version=4 dvc_id=93220 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76773 user=root fd=7u ip_version=4 dvc_id=91380 transport=UDP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1578 transport=UDP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=2581 transport=UDP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=737839 user=root fd=13u ip_version=4 dvc_id=933817 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=719346 user=postgres fd=7u ip_version=4 dvc_id=860770 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94054 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=88024 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=88014 transport=TCP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=89082 transport=UDP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=479 transport=UDP


_raw: Sat Oct 18 14:54:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4293 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 14:54:56 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=836960 user=root fd=13u ip_version=4 dvc_id=1559885 transport=TCP


_raw: Sat Oct 18 14:54:56 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77875 user=xrdp fd=11u ip_version=6 dvc_id=95421 transport=TCP


_raw: Sat Oct 18 14:54:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=92233 transport=TCP


_raw: Sat Oct 18 14:54:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=92231 transport=TCP


_raw: Sat Oct 18 14:54:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89956 transport=UDP


_raw: Sat Oct 18 14:54:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4174 transport=UDP


_raw: Sat Oct 18 14:54:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2684 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 14:54:54 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=745548 user=root fd=13u ip_version=4 dvc_id=933412 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=724089 user=root fd=7u ip_version=4 dvc_id=858198 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=723494 user=root fd=7u ip_version=4 dvc_id=856704 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=723487 user=root fd=7u ip_version=4 dvc_id=854485 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77933 user=xrdp fd=11u ip_version=6 dvc_id=91076 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=7u ip_version=6 dvc_id=92457 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76658 user=root fd=6u ip_version=4 dvc_id=92455 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76557 user=root fd=7u ip_version=4 dvc_id=90399 transport=UDP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=5193 transport=UDP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=736966 user=root fd=13u ip_version=4 dvc_id=979098 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78118 user=xrdp fd=11u ip_version=6 dvc_id=93030 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76831 user=root fd=7u ip_version=6 dvc_id=91386 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76831 user=root fd=6u ip_version=4 dvc_id=91376 transport=TCP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76730 user=root fd=7u ip_version=4 dvc_id=90855 transport=UDP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4445 transport=UDP


_raw: Sat Oct 18 14:54:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4423 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp     8889
tcp       53
tcp       22


_raw: Sat Oct 18 14:54:47 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=748534 user=root fd=13u ip_version=4 dvc_id=1050270 transport=TCP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=firefox-esr dest_ip=* dest_port=34165 pid=711916 user=pentester fd=117u ip_version=4 dvc_id=1247363 transport=UDP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=firefox-esr dest_ip=* dest_port=56209 pid=711916 user=pentester fd=71u ip_version=4 dvc_id=1248294 transport=UDP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94680 transport=TCP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=7u ip_version=6 dvc_id=92245 transport=TCP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=6u ip_version=4 dvc_id=92243 transport=TCP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=92206 transport=UDP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4269 transport=UDP


_raw: Sat Oct 18 14:54:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=625 user=root fd=7u ip_version=4 dvc_id=2801 transport=UDP


_raw:
Proto   Port
udp    34165
udp    56209
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp    34477
tcp       22
tcp     3389
tcp    39869
tcp     8080
tcp       22
tcp     3350


_raw: Sat Oct 18 14:54:42 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=732763 user=root fd=13u ip_version=4 dvc_id=930666 transport=TCP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=34477 pid=730274 user=pentester fd=40u ip_version=4 dvc_id=919945 transport=TCP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=725126 user=pentester fd=37u ip_version=6 dvc_id=892230 transport=TCP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=39869 pid=725126 user=pentester fd=16u ip_version=6 dvc_id=892192 transport=TCP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78107 user=xrdp fd=11u ip_version=6 dvc_id=94813 transport=TCP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=7u ip_version=6 dvc_id=92237 transport=TCP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76706 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 14:54:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3580 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     8888
tcp    37351
tcp     3350
tcp       80
tcp       22
tcp     8080
tcp     3389
tcp    31337


_raw: Sat Oct 18 14:54:38 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=758835 user=root fd=13u ip_version=4 dvc_id=1207260 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=sliver-server dest_ip=* dest_port=31337 pid=748057 user=pentester fd=16u ip_version=6 dvc_id=1174662 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=sliver-server dest_ip=* dest_port=80 pid=748057 user=pentester fd=14u ip_version=6 dvc_id=1169739 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=sliver-server dest_ip=* dest_port=8888 pid=748057 user=pentester fd=13u ip_version=6 dvc_id=1163696 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715382 user=pentester fd=37u ip_version=6 dvc_id=941126 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37351 pid=715382 user=pentester fd=16u ip_version=6 dvc_id=932840 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77903 user=xrdp fd=11u ip_version=6 dvc_id=91997 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76570 user=root fd=7u ip_version=6 dvc_id=89069 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76570 user=root fd=6u ip_version=4 dvc_id=89059 transport=TCP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76469 user=root fd=7u ip_version=4 dvc_id=88979 transport=UDP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1519 transport=UDP


_raw: Sat Oct 18 14:54:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4230 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw: Sat Oct 18 14:54:24 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=752403 user=root fd=13u ip_version=4 dvc_id=1107433 transport=TCP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=51608 pid=709576 user=pentester fd=292u ip_version=4 dvc_id=1549076 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=47474 pid=709576 user=pentester fd=282u ip_version=4 dvc_id=1548138 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=42921 pid=709576 user=pentester fd=281u ip_version=4 dvc_id=1549824 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=46680 pid=709576 user=pentester fd=280u ip_version=4 dvc_id=1550667 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=40718 pid=709576 user=pentester fd=255u ip_version=4 dvc_id=1550666 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=35540 pid=709576 user=pentester fd=249u ip_version=4 dvc_id=1550661 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=53030 pid=709576 user=pentester fd=242u ip_version=4 dvc_id=1549771 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=45207 pid=709576 user=pentester fd=212u ip_version=4 dvc_id=1549770 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=48571 pid=709576 user=pentester fd=210u ip_version=4 dvc_id=1549769 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=57642 pid=709576 user=pentester fd=201u ip_version=4 dvc_id=1549075 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=54997 pid=709576 user=pentester fd=89u ip_version=4 dvc_id=1547972 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77970 user=xrdp fd=11u ip_version=6 dvc_id=94557 transport=TCP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=90619 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 14:54:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     8080
tcp       22
tcp    43765
tcp     3389


_raw: Sat Oct 18 14:54:21 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=737278 user=root fd=13u ip_version=4 dvc_id=964662 transport=TCP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715626 user=pentester fd=37u ip_version=6 dvc_id=855773 transport=TCP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42559 pid=715626 user=pentester fd=16u ip_version=6 dvc_id=853771 transport=TCP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77918 user=xrdp fd=11u ip_version=6 dvc_id=96359 transport=TCP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=7u ip_version=6 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=6u ip_version=4 dvc_id=90617 transport=TCP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76562 user=root fd=7u ip_version=4 dvc_id=91321 transport=UDP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=711 transport=UDP


_raw: Sat Oct 18 14:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1626 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    42559
tcp     8080
tcp       22
tcp     3350


_raw: Sat Oct 18 14:54:20 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=745554 user=root fd=13u ip_version=4 dvc_id=1184646 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=719083 user=pentester fd=37u ip_version=6 dvc_id=859298 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=43765 pid=719083 user=pentester fd=16u ip_version=6 dvc_id=858207 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78160 user=xrdp fd=11u ip_version=6 dvc_id=94017 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=7u ip_version=6 dvc_id=91328 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=6u ip_version=4 dvc_id=91326 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76805 user=root fd=7u ip_version=4 dvc_id=92243 transport=UDP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4112 transport=UDP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1973 transport=UDP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=749574 user=pentester fd=37u ip_version=6 dvc_id=980488 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=40281 pid=749574 user=pentester fd=16u ip_version=6 dvc_id=981338 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=732132 user=root fd=13u ip_version=4 dvc_id=882726 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78045 user=xrdp fd=11u ip_version=6 dvc_id=95486 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=7u ip_version=6 dvc_id=91616 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=6u ip_version=4 dvc_id=91614 transport=TCP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76670 user=root fd=7u ip_version=4 dvc_id=91533 transport=UDP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw: Sat Oct 18 14:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp    40281
tcp     8080
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 14:54:08 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=62984 user=pentester fd=37u ip_version=6 dvc_id=576329 transport=TCP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33529 pid=62984 user=pentester fd=34u ip_version=6 dvc_id=573643 transport=TCP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=39736 user=root fd=13u ip_version=4 dvc_id=374282 transport=TCP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=kdeconnectd dest_ip=* dest_port=53879 pid=2183 user=pentester fd=23u ip_version=6 dvc_id=11661 transport=UDP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=kdeconnectd dest_ip=* dest_port=33773 pid=2183 user=pentester fd=22u ip_version=4 dvc_id=11660 transport=UDP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=21u ip_version=6 dvc_id=11658 transport=UDP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=20u ip_version=4 dvc_id=11657 transport=UDP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=19u ip_version=6 dvc_id=12794 transport=TCP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=18u ip_version=6 dvc_id=12793 transport=UDP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=934 user=xrdp fd=11u ip_version=6 dvc_id=5378 transport=TCP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=7u ip_version=6 dvc_id=4586 transport=TCP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=6u ip_version=4 dvc_id=4576 transport=TCP


_raw: Sat Oct 18 14:54:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=667 user=root fd=7u ip_version=4 dvc_id=760 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    44343


_raw: Sat Oct 18 14:54:06 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=742441 user=root fd=13u ip_version=4 dvc_id=1151762 transport=TCP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=701492 user=pentester fd=37u ip_version=6 dvc_id=863228 transport=TCP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=44343 pid=701492 user=pentester fd=16u ip_version=6 dvc_id=839389 transport=TCP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78087 user=xrdp fd=11u ip_version=6 dvc_id=93987 transport=TCP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=89901 transport=TCP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=89899 transport=TCP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=90939 transport=UDP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3758 transport=UDP


_raw: Sat Oct 18 14:54:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=397 transport=UDP


_raw: Sat Oct 18 14:54:02 EDT 2025 file_hash=SHA2-256(stdin)= c2133aab7de39cdccff5410d52a9fce9eaf99a1d2b3a35f5cab7c7ca8a44942f


_raw: Sat Oct 18 14:54:02 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=40764 user=root fd=13u ip_version=4 dvc_id=326817 transport=TCP


_raw: Sat Oct 18 14:54:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=9836 user=pentester fd=37u ip_version=6 dvc_id=65446 transport=TCP


_raw: Sat Oct 18 14:54:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38057 pid=9836 user=pentester fd=16u ip_version=6 dvc_id=63384 transport=TCP


_raw: Sat Oct 18 14:54:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=940 user=xrdp fd=11u ip_version=6 dvc_id=824 transport=TCP


_raw: Sat Oct 18 14:54:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=7u ip_version=6 dvc_id=4605 transport=TCP


_raw: Sat Oct 18 14:54:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=6u ip_version=4 dvc_id=4603 transport=TCP


_raw: Sat Oct 18 14:54:02 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=39763 pid=892 user=root fd=9u ip_version=4 dvc_id=4661 transport=TCP


_raw: Sat Oct 18 14:54:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=664 user=root fd=7u ip_version=4 dvc_id=3825 transport=UDP


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Sat Oct 18 14:54:00 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=742533 user=postgres fd=7u ip_version=4 dvc_id=1011239 transport=TCP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739806 user=root fd=13u ip_version=4 dvc_id=997743 transport=TCP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=x-www-browser dest_ip=* dest_port=60657 pid=710986 user=pentester fd=195u ip_version=4 dvc_id=1205335 transport=UDP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=x-www-browser dest_ip=* dest_port=58668 pid=710986 user=pentester fd=142u ip_version=4 dvc_id=1205332 transport=UDP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=x-www-browser dest_ip=* dest_port=46106 pid=710986 user=pentester fd=67u ip_version=4 dvc_id=1205321 transport=UDP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78178 user=xrdp fd=11u ip_version=6 dvc_id=94976 transport=TCP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=7u ip_version=6 dvc_id=89067 transport=TCP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=6u ip_version=4 dvc_id=89065 transport=TCP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76817 user=root fd=7u ip_version=4 dvc_id=89871 transport=UDP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=664 transport=UDP


_raw: Sat Oct 18 14:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw:
Proto   Port
udp    46106
udp    58668
udp    60657
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     3350
tcp     3389
tcp       22
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 14:53:53 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=732102 user=root fd=13u ip_version=4 dvc_id=1052765 transport=TCP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=695565 user=root fd=282u ip_version=6 dvc_id=836895 transport=TCP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=695565 user=root fd=281u ip_version=6 dvc_id=836889 transport=TCP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=96593 transport=TCP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90751 transport=TCP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=90698 transport=UDP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3656 transport=UDP


_raw: Sat Oct 18 14:53:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=1563 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     7687
tcp     7474
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 14:53:52 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740418 user=root fd=13u ip_version=4 dvc_id=1077519 transport=TCP


_raw: Sat Oct 18 14:53:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77946 user=xrdp fd=11u ip_version=6 dvc_id=93897 transport=TCP


_raw: Sat Oct 18 14:53:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=7u ip_version=6 dvc_id=89034 transport=TCP


_raw: Sat Oct 18 14:53:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=6u ip_version=4 dvc_id=89032 transport=TCP


_raw: Sat Oct 18 14:53:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=91451 transport=UDP


_raw: Sat Oct 18 14:53:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4350 transport=UDP


_raw: Sat Oct 18 14:53:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1804 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     5432
tcp       22
tcp    38329
tcp     3350
tcp     8080
tcp     3389
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp       22
tcp     8080
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 14:53:45 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=800603 user=postgres fd=7u ip_version=4 dvc_id=1069934 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=757169 user=root fd=13u ip_version=4 dvc_id=944015 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715238 user=pentester fd=37u ip_version=6 dvc_id=845960 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38329 pid=715238 user=pentester fd=16u ip_version=6 dvc_id=845191 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77957 user=xrdp fd=11u ip_version=6 dvc_id=94678 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=7u ip_version=6 dvc_id=93212 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=6u ip_version=4 dvc_id=93210 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76597 user=root fd=7u ip_version=4 dvc_id=90691 transport=UDP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3591 transport=UDP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1780 transport=UDP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=773850 user=root fd=13u ip_version=4 dvc_id=1115778 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700460 user=root fd=7u ip_version=4 dvc_id=848461 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=699854 user=root fd=7u ip_version=4 dvc_id=843589 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=699844 user=root fd=7u ip_version=4 dvc_id=845242 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78023 user=xrdp fd=11u ip_version=6 dvc_id=92144 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=7u ip_version=6 dvc_id=90926 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=6u ip_version=4 dvc_id=90924 transport=TCP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76603 user=root fd=7u ip_version=4 dvc_id=92188 transport=UDP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3583 transport=UDP


_raw: Sat Oct 18 14:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2675 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp     8000
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 14:53:40 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=953810 user=pentester fd=37u ip_version=6 dvc_id=6391810 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45365 pid=953810 user=pentester fd=16u ip_version=6 dvc_id=6385559 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=764952 user=root fd=13u ip_version=4 dvc_id=1145813 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=741616 user=_gvm fd=4u ip_version=4 dvc_id=1009793 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=741613 user=_gvm fd=4u ip_version=4 dvc_id=1009792 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=722742 user=postgres fd=7u ip_version=4 dvc_id=886146 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=redis-server dest_ip=127.0.0.1 dest_port=6379 pid=721622 user=redis fd=8u ip_version=4 dvc_id=873373 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=721232 user=mosquitto fd=5u ip_version=4 dvc_id=870055 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=55485 pid=715561 user=pentester fd=170u ip_version=4 dvc_id=6399609 transport=UDP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=x-www-browser dest_ip=* dest_port=46065 pid=715561 user=pentester fd=165u ip_version=4 dvc_id=6400344 transport=UDP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78056 user=xrdp fd=11u ip_version=6 dvc_id=94759 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=7u ip_version=6 dvc_id=90769 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=6u ip_version=4 dvc_id=90759 transport=TCP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76695 user=root fd=7u ip_version=4 dvc_id=89933 transport=UDP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=458 transport=UDP


_raw: Sat Oct 18 14:53:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=1673 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 14:53:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=780201 user=root fd=13u ip_version=4 dvc_id=994808 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77974 user=xrdp fd=11u ip_version=6 dvc_id=93705 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=92193 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=92191 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=89070 transport=UDP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4280 transport=UDP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3762 transport=UDP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741489 user=root fd=13u ip_version=4 dvc_id=976746 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77961 user=xrdp fd=11u ip_version=6 dvc_id=93129 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=7u ip_version=6 dvc_id=91091 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=6u ip_version=4 dvc_id=91089 transport=TCP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76599 user=root fd=7u ip_version=4 dvc_id=91751 transport=UDP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3650 transport=UDP


_raw: Sat Oct 18 14:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=551 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 14:53:32 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741654 user=root fd=13u ip_version=4 dvc_id=945661 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=x-www-browser dest_ip=* dest_port=45768 pid=718306 user=pentester fd=125u ip_version=4 dvc_id=1079023 transport=UDP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77794 user=xrdp fd=11u ip_version=6 dvc_id=92156 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76404 user=root fd=7u ip_version=4 dvc_id=89912 transport=UDP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=905 transport=UDP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4175 transport=UDP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=730643 user=root fd=13u ip_version=4 dvc_id=1037906 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77925 user=xrdp fd=11u ip_version=6 dvc_id=93793 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=7u ip_version=6 dvc_id=90586 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=6u ip_version=4 dvc_id=90584 transport=TCP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76479 user=root fd=7u ip_version=4 dvc_id=90009 transport=UDP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2849 transport=UDP


_raw: Sat Oct 18 14:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    45768
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 14:53:30 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=731379 user=root fd=13u ip_version=4 dvc_id=856269 transport=TCP


_raw: Sat Oct 18 14:53:30 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=94192 transport=TCP


_raw: Sat Oct 18 14:53:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=90439 transport=TCP


_raw: Sat Oct 18 14:53:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=90437 transport=TCP


_raw: Sat Oct 18 14:53:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76516 user=root fd=7u ip_version=4 dvc_id=91289 transport=UDP


_raw: Sat Oct 18 14:53:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=894 transport=UDP


_raw: Sat Oct 18 14:53:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1770 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw: Sat Oct 18 14:53:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=725573 user=root fd=13u ip_version=4 dvc_id=884186 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95177 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=7u ip_version=6 dvc_id=92362 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=6u ip_version=4 dvc_id=92360 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76530 user=root fd=7u ip_version=4 dvc_id=91417 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=1629 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=2879 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=761134 user=pentester fd=37u ip_version=6 dvc_id=1200711 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=44561 pid=761134 user=pentester fd=16u ip_version=6 dvc_id=1201303 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=60150 pid=748899 user=pentester fd=255u ip_version=4 dvc_id=1329298 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=40964 pid=748899 user=pentester fd=196u ip_version=4 dvc_id=1330793 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=33694 pid=748899 user=pentester fd=195u ip_version=4 dvc_id=1324741 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=35445 pid=748899 user=pentester fd=190u ip_version=4 dvc_id=1330792 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=58261 pid=748899 user=pentester fd=181u ip_version=4 dvc_id=1325296 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=46236 pid=748899 user=pentester fd=175u ip_version=4 dvc_id=1330517 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=41924 pid=748899 user=pentester fd=173u ip_version=4 dvc_id=1327825 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=37070 pid=748899 user=pentester fd=170u ip_version=4 dvc_id=1326373 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=59028 pid=748899 user=pentester fd=164u ip_version=4 dvc_id=1323389 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=52683 pid=748899 user=pentester fd=161u ip_version=4 dvc_id=1324398 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=53120 pid=748899 user=pentester fd=158u ip_version=4 dvc_id=1326178 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=36154 pid=748899 user=pentester fd=154u ip_version=4 dvc_id=1326176 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=55398 pid=748899 user=pentester fd=151u ip_version=4 dvc_id=1326175 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=58556 pid=748899 user=pentester fd=146u ip_version=4 dvc_id=1324198 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=46418 pid=748899 user=pentester fd=128u ip_version=4 dvc_id=1323305 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740329 user=root fd=13u ip_version=4 dvc_id=975927 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78253 user=xrdp fd=11u ip_version=6 dvc_id=94909 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=7u ip_version=6 dvc_id=89930 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=6u ip_version=4 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76890 user=root fd=7u ip_version=4 dvc_id=89862 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3570 transport=UDP


_raw: Sat Oct 18 14:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=3067 transport=UDP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=753678 user=root fd=13u ip_version=4 dvc_id=982545 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=735279 user=_gvm fd=4u ip_version=4 dvc_id=925447 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=735276 user=_gvm fd=4u ip_version=4 dvc_id=925925 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=715682 user=postgres fd=7u ip_version=4 dvc_id=838335 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=715667 user=mosquitto fd=5u ip_version=4 dvc_id=836029 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78006 user=xrdp fd=11u ip_version=6 dvc_id=94671 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=7u ip_version=6 dvc_id=91660 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=6u ip_version=4 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76666 user=root fd=7u ip_version=4 dvc_id=92296 transport=UDP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=2635 transport=UDP


_raw: Sat Oct 18 14:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2620 transport=UDP


_raw:
Proto   Port
udp    56147
udp       68
udp       68
udp       68
udp    49379
udp      443
udp     5353
udp     5355
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
tcp     8889
tcp       22
tcp    40057
tcp     5985
tcp     5986
tcp     1883
tcp     1433
tcp    41637
tcp     3350
tcp    45900
tcp      636
tcp      587
tcp      445
tcp      443
tcp      389
tcp      143
tcp      139
tcp      135
tcp       53
tcp       25
tcp       21
tcp       22
tcp      110
tcp       88
tcp       80
tcp     3389
tcp     8080