_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    49468
udp    46190
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    55870
udp    57337
udp       68
udp       68
udp       68
udp    33023
udp    50484
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=717373 user=root fd=36u ip_version=6 dvc_id=895371 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=717373 user=root fd=35u ip_version=6 dvc_id=895370 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=717373 user=root fd=34u ip_version=6 dvc_id=895369 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=717373 user=root fd=33u ip_version=6 dvc_id=895368 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=717373 user=root fd=32u ip_version=6 dvc_id=895367 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=717373 user=root fd=31u ip_version=6 dvc_id=893571 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=717373 user=root fd=30u ip_version=6 dvc_id=894385 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=717373 user=root fd=29u ip_version=6 dvc_id=893572 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=717373 user=root fd=28u ip_version=6 dvc_id=895366 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=717373 user=root fd=27u ip_version=6 dvc_id=892659 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=717373 user=root fd=26u ip_version=6 dvc_id=892658 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=717373 user=root fd=25u ip_version=6 dvc_id=894384 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=717373 user=root fd=24u ip_version=6 dvc_id=893570 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=717373 user=root fd=23u ip_version=6 dvc_id=892657 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=717373 user=root fd=22u ip_version=6 dvc_id=895365 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=717373 user=root fd=21u ip_version=6 dvc_id=895364 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=717373 user=root fd=20u ip_version=6 dvc_id=895363 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=717373 user=root fd=19u ip_version=6 dvc_id=893569 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=717373 user=root fd=18u ip_version=4 dvc_id=892660 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=717373 user=root fd=14u ip_version=6 dvc_id=895362 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=717373 user=root fd=13u ip_version=6 dvc_id=895361 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=45663 pid=717373 user=root fd=12u ip_version=6 dvc_id=895360 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=717373 user=root fd=11u ip_version=6 dvc_id=895359 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=717373 user=root fd=10u ip_version=6 dvc_id=895358 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=717373 user=root fd=9u ip_version=6 dvc_id=892656 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=717373 user=root fd=8u ip_version=6 dvc_id=895356 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=717373 user=root fd=7u ip_version=6 dvc_id=892655 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=717373 user=root fd=6u ip_version=6 dvc_id=895354 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=x-www-browser dest_ip=* dest_port=54720 pid=692356 user=pentester fd=70u ip_version=4 dvc_id=909968 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=x-www-browser dest_ip=* dest_port=59970 pid=692356 user=pentester fd=67u ip_version=4 dvc_id=909964 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77992 user=xrdp fd=11u ip_version=6 dvc_id=96357 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=89778 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=89776 transport=TCP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=90671 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=804 transport=UDP


_raw: Sat Oct 18 12:16:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2658 transport=UDP


_raw:
Proto   Port
udp    54720
udp    59970
udp       68
udp       68
udp       68
udp      443
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
tcp       22
tcp     1433
tcp     1883
tcp     3350
tcp     5986
tcp     5985
tcp       22
tcp       21
tcp       25
tcp       53
tcp       80
tcp       88
tcp      110
tcp      135
tcp      139
tcp      143
tcp      389
tcp      443
tcp      445
tcp    45663
tcp      587
tcp      636
tcp     3389


_raw: Sat Oct 18 12:16:01 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726453 user=pentester fd=37u ip_version=6 dvc_id=904211 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42789 pid=726453 user=pentester fd=16u ip_version=6 dvc_id=904195 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=30u ip_version=4 dvc_id=862461 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=29u ip_version=4 dvc_id=862460 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=smbd dest_ip=* dest_port=139 pid=718717 user=root fd=28u ip_version=6 dvc_id=862459 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=smbd dest_ip=* dest_port=445 pid=718717 user=root fd=27u ip_version=6 dvc_id=862458 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=138 pid=718710 user=root fd=17u ip_version=4 dvc_id=859993 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=138 pid=718710 user=root fd=16u ip_version=4 dvc_id=859992 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=nmbd dest_ip=10.0.254.255 dest_port=137 pid=718710 user=root fd=15u ip_version=4 dvc_id=859991 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=nmbd dest_ip=10.0.254.204 dest_port=137 pid=718710 user=root fd=14u ip_version=4 dvc_id=859990 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=nmbd dest_ip=* dest_port=138 pid=718710 user=root fd=13u ip_version=4 dvc_id=859979 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=nmbd dest_ip=* dest_port=137 pid=718710 user=root fd=12u ip_version=4 dvc_id=859978 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77884 user=xrdp fd=11u ip_version=6 dvc_id=96345 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=88988 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=88978 transport=TCP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76525 user=root fd=7u ip_version=4 dvc_id=89807 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=488 transport=UDP


_raw: Sat Oct 18 12:16:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1608 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      137
udp      137
udp      137
udp      138
udp      138
udp      138
tcp      139
tcp       22
tcp      445
tcp      139
tcp       22
tcp      445
tcp     3350
tcp    42789
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    37940
udp    55334
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    51553
udp    60772
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:15:52 EDT 2025 app=x-www-browser dest_ip=* dest_port=51553 pid=698706 user=pentester fd=150u ip_version=4 dvc_id=1016266 transport=UDP


_raw: Sat Oct 18 12:15:52 EDT 2025 app=x-www-browser dest_ip=* dest_port=60772 pid=698706 user=pentester fd=137u ip_version=4 dvc_id=1014664 transport=UDP


_raw: Sat Oct 18 12:15:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77926 user=xrdp fd=11u ip_version=6 dvc_id=93098 transport=TCP


_raw: Sat Oct 18 12:15:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=7u ip_version=6 dvc_id=90878 transport=TCP


_raw: Sat Oct 18 12:15:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=6u ip_version=4 dvc_id=90876 transport=TCP


_raw: Sat Oct 18 12:15:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76533 user=root fd=7u ip_version=4 dvc_id=90833 transport=UDP


_raw: Sat Oct 18 12:15:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=628 transport=UDP


_raw: Sat Oct 18 12:15:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=603 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     6666
tcp     1080
tcp     9389
tcp      445
tcp     8889
tcp     9090
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:15:48 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=45725 pid=724078 user=root fd=9u ip_version=4 dvc_id=1336450 transport=TCP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=721164 user=root fd=282u ip_version=6 dvc_id=1318756 transport=TCP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=721164 user=root fd=281u ip_version=6 dvc_id=1318750 transport=TCP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=720734 user=postgres fd=7u ip_version=4 dvc_id=1319180 transport=TCP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78485 user=xrdp fd=11u ip_version=6 dvc_id=93858 transport=TCP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=7u ip_version=6 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=6u ip_version=4 dvc_id=89952 transport=TCP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77015 user=root fd=7u ip_version=4 dvc_id=91617 transport=UDP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3040 transport=UDP


_raw: Sat Oct 18 12:15:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=1698 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    53913
tcp       22
tcp     8889
tcp     5432
tcp     1883
tcp     3350
tcp       22
tcp     5432
tcp     1883
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp    45725
tcp       22
tcp     5432
tcp     5432
tcp     7687
tcp     3389
tcp     7474
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:15:44 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93110 transport=TCP


_raw: Sat Oct 18 12:15:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=90711 transport=TCP


_raw: Sat Oct 18 12:15:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=90709 transport=TCP


_raw: Sat Oct 18 12:15:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76558 user=root fd=7u ip_version=4 dvc_id=91467 transport=UDP


_raw: Sat Oct 18 12:15:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=3853 transport=UDP


_raw: Sat Oct 18 12:15:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Sat Oct 18 12:15:42 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726263 user=pentester fd=37u ip_version=6 dvc_id=967490 transport=TCP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38003 pid=726263 user=pentester fd=16u ip_version=6 dvc_id=965488 transport=TCP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=firefox-esr dest_ip=* dest_port=56275 pid=723862 user=pentester fd=118u ip_version=4 dvc_id=1074784 transport=UDP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=firefox-esr dest_ip=* dest_port=43794 pid=723862 user=pentester fd=114u ip_version=4 dvc_id=1074791 transport=UDP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77878 user=xrdp fd=11u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=7u ip_version=6 dvc_id=89945 transport=TCP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=6u ip_version=4 dvc_id=89943 transport=TCP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76488 user=root fd=7u ip_version=4 dvc_id=90481 transport=UDP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4267 transport=UDP


_raw: Sat Oct 18 12:15:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1011 transport=UDP


_raw:
Proto   Port
udp    43794
udp    56275
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp    38003
tcp     3389
tcp       22
tcp     8080


_raw: Sat Oct 18 12:15:41 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=742124 user=root fd=7u ip_version=6 dvc_id=953710 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=742117 user=root fd=7u ip_version=4 dvc_id=953709 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=742019 user=root fd=7u ip_version=6 dvc_id=954699 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=742013 user=root fd=7u ip_version=4 dvc_id=954698 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=741648 user=root fd=7u ip_version=6 dvc_id=953480 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=741641 user=root fd=7u ip_version=4 dvc_id=953479 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77913 user=xrdp fd=11u ip_version=6 dvc_id=93015 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=92300 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=92298 transport=TCP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76511 user=root fd=7u ip_version=4 dvc_id=88033 transport=UDP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4225 transport=UDP


_raw: Sat Oct 18 12:15:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2686 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp     8001
tcp     5432
tcp       22
tcp     8000
tcp     8001
tcp     3389
tcp     3350
tcp     5432
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    40153
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     8000
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp    57753
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     8080
tcp     3389
tcp       22
tcp    38441


_raw: Sat Oct 18 12:15:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=724652 user=pentester fd=37u ip_version=6 dvc_id=854719 transport=TCP


_raw: Sat Oct 18 12:15:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38441 pid=724652 user=pentester fd=34u ip_version=6 dvc_id=856554 transport=TCP


_raw: Sat Oct 18 12:15:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78065 user=xrdp fd=11u ip_version=6 dvc_id=93056 transport=TCP


_raw: Sat Oct 18 12:15:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=91036 transport=TCP


_raw: Sat Oct 18 12:15:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=91034 transport=TCP


_raw: Sat Oct 18 12:15:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76664 user=root fd=7u ip_version=4 dvc_id=90961 transport=UDP


_raw: Sat Oct 18 12:15:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4102 transport=UDP


_raw: Sat Oct 18 12:15:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=537 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:15:23 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=9392 pid=703709 user=root fd=4u ip_version=4 dvc_id=874097 transport=TCP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=40419 pid=699779 user=root fd=7u ip_version=4 dvc_id=858870 transport=TCP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=x-www-browser dest_ip=* dest_port=41563 pid=692931 user=pentester fd=167u ip_version=4 dvc_id=2293001 transport=UDP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=x-www-browser dest_ip=* dest_port=38837 pid=692931 user=pentester fd=112u ip_version=4 dvc_id=2292870 transport=UDP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=x-www-browser dest_ip=* dest_port=43608 pid=692931 user=pentester fd=81u ip_version=4 dvc_id=2293550 transport=UDP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=95039 transport=TCP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=91797 transport=TCP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=91795 transport=TCP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90585 transport=UDP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4009 transport=UDP


_raw: Sat Oct 18 12:15:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4226 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    41563
udp    38837
udp    43608
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    42781
tcp       22
tcp     8889
tcp     6010
tcp     6010
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 12:15:18 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=735279 user=_gvm fd=4u ip_version=4 dvc_id=925447 transport=TCP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=735276 user=_gvm fd=4u ip_version=4 dvc_id=925925 transport=TCP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=715682 user=postgres fd=7u ip_version=4 dvc_id=838335 transport=TCP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=715667 user=mosquitto fd=5u ip_version=4 dvc_id=836029 transport=TCP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78006 user=xrdp fd=11u ip_version=6 dvc_id=94671 transport=TCP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=7u ip_version=6 dvc_id=91660 transport=TCP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=6u ip_version=4 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76666 user=root fd=7u ip_version=4 dvc_id=92296 transport=UDP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=2635 transport=UDP


_raw: Sat Oct 18 12:15:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2620 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp    60228
udp       68
udp       68
udp       68
udp    57802
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    42604
udp    47087
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp     8080
tcp       22
tcp    33349


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:15:09 EDT 2025 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=724124 user=_bloodhound fd=8u ip_version=4 dvc_id=1634683 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=bhapi dest_ip=* dest_port=2112 pid=724124 user=_bloodhound fd=6u ip_version=6 dvc_id=1641764 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=720952 user=root fd=282u ip_version=6 dvc_id=1615562 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=720952 user=root fd=281u ip_version=6 dvc_id=1615442 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=720839 user=postgres fd=7u ip_version=4 dvc_id=1616140 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77950 user=xrdp fd=11u ip_version=6 dvc_id=93046 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76662 user=root fd=7u ip_version=6 dvc_id=92215 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76662 user=root fd=6u ip_version=4 dvc_id=92205 transport=TCP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76561 user=root fd=7u ip_version=4 dvc_id=90749 transport=UDP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4006 transport=UDP


_raw: Sat Oct 18 12:15:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4150 transport=UDP


_raw:
Proto   Port
udp    55776
udp       68
udp       68
udp       68
tcp     9090
tcp     8889
tcp      443
tcp       22
tcp       80
tcp     3350
tcp    38179
tcp       22
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8080
tcp     5432
tcp       22
tcp     3389
tcp     7474
tcp     2112
tcp     5432
tcp     7687
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     8889
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp    45637
tcp      636
tcp     3350
tcp     1433
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     5432
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 12:15:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78093 user=xrdp fd=11u ip_version=6 dvc_id=94642 transport=TCP


_raw: Sat Oct 18 12:15:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=7u ip_version=6 dvc_id=92378 transport=TCP


_raw: Sat Oct 18 12:15:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=6u ip_version=4 dvc_id=92376 transport=TCP


_raw: Sat Oct 18 12:15:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76689 user=root fd=7u ip_version=4 dvc_id=90574 transport=UDP


_raw: Sat Oct 18 12:15:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1561 transport=UDP


_raw: Sat Oct 18 12:15:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3965 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp       22
tcp     3350
tcp     5432
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     9392
tcp     8000
tcp     5432
tcp     1883
tcp       80
tcp     8889
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp    39782
udp    48718
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp    38003
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    50757
tcp       22
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp    33791
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 12:14:28 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=741616 user=_gvm fd=4u ip_version=4 dvc_id=1009793 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=741613 user=_gvm fd=4u ip_version=4 dvc_id=1009792 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=722742 user=postgres fd=7u ip_version=4 dvc_id=886146 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=redis-server dest_ip=127.0.0.1 dest_port=6379 pid=721622 user=redis fd=8u ip_version=4 dvc_id=873373 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=721232 user=mosquitto fd=5u ip_version=4 dvc_id=870055 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=33246 pid=715561 user=pentester fd=209u ip_version=4 dvc_id=1012073 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=41629 pid=715561 user=pentester fd=208u ip_version=4 dvc_id=1012092 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=46431 pid=715561 user=pentester fd=207u ip_version=4 dvc_id=1013199 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=33654 pid=715561 user=pentester fd=204u ip_version=4 dvc_id=1013201 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=54567 pid=715561 user=pentester fd=192u ip_version=4 dvc_id=1013169 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=47678 pid=715561 user=pentester fd=191u ip_version=4 dvc_id=1013171 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=32964 pid=715561 user=pentester fd=190u ip_version=4 dvc_id=1013789 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=49160 pid=715561 user=pentester fd=189u ip_version=4 dvc_id=1013788 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=54682 pid=715561 user=pentester fd=185u ip_version=4 dvc_id=1013168 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=42378 pid=715561 user=pentester fd=184u ip_version=4 dvc_id=1013161 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=45554 pid=715561 user=pentester fd=172u ip_version=4 dvc_id=1013162 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=48755 pid=715561 user=pentester fd=169u ip_version=4 dvc_id=1013153 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=39097 pid=715561 user=pentester fd=168u ip_version=4 dvc_id=1013163 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=53493 pid=715561 user=pentester fd=165u ip_version=4 dvc_id=1013156 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=58735 pid=715561 user=pentester fd=159u ip_version=4 dvc_id=1012091 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=x-www-browser dest_ip=* dest_port=33617 pid=715561 user=pentester fd=151u ip_version=4 dvc_id=1013145 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78056 user=xrdp fd=11u ip_version=6 dvc_id=94759 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=7u ip_version=6 dvc_id=90769 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=6u ip_version=4 dvc_id=90759 transport=TCP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76695 user=root fd=7u ip_version=4 dvc_id=89933 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=458 transport=UDP


_raw: Sat Oct 18 12:14:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=1673 transport=UDP


_raw: Sat Oct 18 12:14:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77868 user=xrdp fd=11u ip_version=6 dvc_id=93133 transport=TCP


_raw: Sat Oct 18 12:14:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=7u ip_version=6 dvc_id=90603 transport=TCP


_raw: Sat Oct 18 12:14:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=6u ip_version=4 dvc_id=90593 transport=TCP


_raw: Sat Oct 18 12:14:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76527 user=root fd=7u ip_version=4 dvc_id=89849 transport=UDP


_raw: Sat Oct 18 12:14:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4190 transport=UDP


_raw: Sat Oct 18 12:14:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3609 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     8080
tcp     3389
tcp       22
tcp    38441


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    34057
udp    36169
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp     8889
tcp       22


_raw: Sat Oct 18 12:14:12 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78045 user=xrdp fd=11u ip_version=6 dvc_id=95486 transport=TCP


_raw: Sat Oct 18 12:14:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=7u ip_version=6 dvc_id=91616 transport=TCP


_raw: Sat Oct 18 12:14:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=6u ip_version=4 dvc_id=91614 transport=TCP


_raw: Sat Oct 18 12:14:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76670 user=root fd=7u ip_version=4 dvc_id=91533 transport=UDP


_raw: Sat Oct 18 12:14:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw: Sat Oct 18 12:14:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp    44995
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    38299
udp       68
udp       68
udp       68
udp    41466
tcp     8889
tcp       22
tcp    41637
tcp     3350
tcp       22
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     8080
tcp       22
tcp    43765
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    42559
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     5432
tcp     8080
tcp     3350
tcp    37181
tcp       22
tcp     3389
tcp     5432
tcp     2112
tcp     7474
tcp     7687


_raw: Sat Oct 18 12:14:02 EDT 2025 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=720237 user=_bloodhound fd=7u ip_version=4 dvc_id=904981 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=bhapi dest_ip=* dest_port=2112 pid=719491 user=_bloodhound fd=6u ip_version=6 dvc_id=908944 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=719045 user=root fd=282u ip_version=6 dvc_id=900616 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=719045 user=root fd=281u ip_version=6 dvc_id=900610 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=718955 user=postgres fd=7u ip_version=4 dvc_id=904283 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37181 pid=703595 user=pentester fd=16u ip_version=6 dvc_id=835237 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=696473 user=pentester fd=222u ip_version=4 dvc_id=855089 transport=UDP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77973 user=xrdp fd=11u ip_version=6 dvc_id=95395 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=7u ip_version=6 dvc_id=89887 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=6u ip_version=4 dvc_id=89885 transport=TCP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76514 user=root fd=7u ip_version=4 dvc_id=89845 transport=UDP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4343 transport=UDP


_raw: Sat Oct 18 12:14:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2834 transport=UDP


_raw: Sat Oct 18 12:14:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77819 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Sat Oct 18 12:14:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76558 user=root fd=7u ip_version=6 dvc_id=90637 transport=TCP


_raw: Sat Oct 18 12:14:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76558 user=root fd=6u ip_version=4 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 12:14:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76453 user=root fd=7u ip_version=4 dvc_id=91498 transport=UDP


_raw: Sat Oct 18 12:14:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2899 transport=UDP


_raw: Sat Oct 18 12:14:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=2881 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      137
udp      137
udp      137
udp      138
udp      138
udp      138
tcp     8889
tcp      139
tcp       22
tcp      445
tcp      139
tcp       22
tcp      445
tcp     3350
tcp    42789
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp    36145
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp    36350
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    44343


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp     8889
tcp       22
tcp     3389
tcp     1433
tcp     1883
tcp     5985
tcp     5986
tcp      135
tcp      139
tcp      143
tcp       21
tcp       22
tcp       25
tcp       53
tcp       80
tcp     3350
tcp       88
tcp      110
tcp      389
tcp      443
tcp      445
tcp    45749
tcp      587
tcp      636


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp    45725
tcp       22
tcp     5432
tcp     5432
tcp     7687
tcp     3389
tcp     7474
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp     8889
tcp       22
tcp     3389
tcp     1433
tcp     1883
tcp     5985
tcp     5986
tcp      139
tcp      143
tcp      135
tcp       25
tcp       21
tcp       22
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp    45495
tcp     3350
tcp      587
tcp      636


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    34297
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp     8001
tcp     5432
tcp     8889
tcp       22
tcp     8000
tcp     8001
tcp     3389
tcp     3350
tcp     5432
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    34933
tcp     3350
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     1883
tcp     5432
tcp     9392
tcp     8889
tcp       80
tcp       22
tcp     6379
tcp     3389
tcp     3350
tcp     6379
tcp     1883
tcp     5432
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    37351
tcp     3350
tcp       22
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp     8080
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    54415
udp    50339
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    37102
udp    51209
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     8889
tcp       22
tcp     5432
tcp     8080
tcp     3350
tcp    37181
tcp       22
tcp     3389
tcp     5432
tcp     2112
tcp     7474
tcp     7687


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    53333
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8080
tcp     8889
tcp     5432
tcp     5432
tcp     7474
tcp       22
tcp     7687
tcp     3350
tcp     3389
tcp     2112


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:12:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78131 user=xrdp fd=11u ip_version=6 dvc_id=94741 transport=TCP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=7u ip_version=6 dvc_id=93230 transport=TCP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=6u ip_version=4 dvc_id=93220 transport=TCP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76773 user=root fd=7u ip_version=4 dvc_id=91380 transport=UDP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1578 transport=UDP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=2581 transport=UDP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78003 user=xrdp fd=11u ip_version=6 dvc_id=96479 transport=TCP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=7u ip_version=6 dvc_id=93207 transport=TCP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=6u ip_version=4 dvc_id=93205 transport=TCP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76523 user=root fd=7u ip_version=4 dvc_id=92167 transport=UDP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=1730 transport=UDP


_raw: Sat Oct 18 12:12:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4097 transport=UDP


_raw: Sat Oct 18 12:12:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78118 user=xrdp fd=11u ip_version=6 dvc_id=93030 transport=TCP


_raw: Sat Oct 18 12:12:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76831 user=root fd=7u ip_version=6 dvc_id=91386 transport=TCP


_raw: Sat Oct 18 12:12:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76831 user=root fd=6u ip_version=4 dvc_id=91376 transport=TCP


_raw: Sat Oct 18 12:12:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76730 user=root fd=7u ip_version=4 dvc_id=90855 transport=UDP


_raw: Sat Oct 18 12:12:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4445 transport=UDP


_raw: Sat Oct 18 12:12:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4423 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp    42613
tcp    45299
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp       22
tcp     8080
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 12:12:27 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=42613 pid=714410 user=pentester fd=16u ip_version=6 dvc_id=883359 transport=TCP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=714259 user=pentester fd=37u ip_version=6 dvc_id=883394 transport=TCP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45299 pid=714259 user=pentester fd=16u ip_version=6 dvc_id=884880 transport=TCP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78058 user=xrdp fd=11u ip_version=6 dvc_id=95114 transport=TCP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=92229 transport=TCP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=92166 transport=UDP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw: Sat Oct 18 12:12:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=579 transport=UDP


_raw:
Proto   Port
udp    35915
udp       68
udp       68
udp       68
udp    50525
udp    46643
tcp       22
tcp     3350
tcp     8080
tcp     3389
tcp    43527
tcp       22


_raw: Sat Oct 18 12:12:26 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700460 user=root fd=7u ip_version=4 dvc_id=848461 transport=TCP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=699854 user=root fd=7u ip_version=4 dvc_id=843589 transport=TCP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=699844 user=root fd=7u ip_version=4 dvc_id=845242 transport=TCP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78023 user=xrdp fd=11u ip_version=6 dvc_id=92144 transport=TCP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=7u ip_version=6 dvc_id=90926 transport=TCP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=6u ip_version=4 dvc_id=90924 transport=TCP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76603 user=root fd=7u ip_version=4 dvc_id=92188 transport=UDP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3583 transport=UDP


_raw: Sat Oct 18 12:12:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2675 transport=UDP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=720431 user=pentester fd=37u ip_version=6 dvc_id=930761 transport=TCP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=43527 pid=720431 user=pentester fd=16u ip_version=6 dvc_id=939029 transport=TCP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=x-www-browser dest_ip=* dest_port=46643 pid=698123 user=pentester fd=112u ip_version=4 dvc_id=948765 transport=UDP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=x-www-browser dest_ip=* dest_port=35915 pid=698123 user=pentester fd=85u ip_version=4 dvc_id=949738 transport=UDP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77971 user=xrdp fd=11u ip_version=6 dvc_id=93019 transport=TCP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=92278 transport=TCP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=92276 transport=TCP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=88762 transport=UDP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3862 transport=UDP


_raw: Sat Oct 18 12:12:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3848 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     5000
tcp     8081
tcp       22
tcp    39353
tcp    33733
tcp     3350
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 12:12:21 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=5000 pid=736799 user=pentester fd=6u ip_version=4 dvc_id=953496 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=5000 pid=736799 user=pentester fd=5u ip_version=4 dvc_id=953496 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=5000 pid=736798 user=pentester fd=5u ip_version=4 dvc_id=953496 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=nc dest_ip=* dest_port=8081 pid=734671 user=pentester fd=3u ip_version=4 dvc_id=944911 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=39353 pid=723874 user=pentester fd=36u ip_version=4 dvc_id=872019 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=721701 user=pentester fd=37u ip_version=6 dvc_id=859538 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33733 pid=721701 user=pentester fd=16u ip_version=6 dvc_id=860698 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77926 user=xrdp fd=11u ip_version=6 dvc_id=95531 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90892 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90890 transport=TCP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=92282 transport=UDP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=2805 transport=UDP


_raw: Sat Oct 18 12:12:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2790 transport=UDP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=717191 user=pentester fd=37u ip_version=6 dvc_id=882016 transport=TCP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=39201 pid=717191 user=pentester fd=16u ip_version=6 dvc_id=881998 transport=TCP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=firefox-esr dest_ip=* dest_port=37057 pid=702772 user=pentester fd=102u ip_version=4 dvc_id=903172 transport=UDP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=firefox-esr dest_ip=* dest_port=39937 pid=702772 user=pentester fd=69u ip_version=4 dvc_id=903169 transport=UDP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78081 user=xrdp fd=11u ip_version=6 dvc_id=96343 transport=TCP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=7u ip_version=6 dvc_id=91583 transport=TCP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=6u ip_version=4 dvc_id=91581 transport=TCP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76664 user=root fd=7u ip_version=4 dvc_id=91511 transport=UDP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4287 transport=UDP


_raw: Sat Oct 18 12:12:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=1860 transport=UDP


_raw:
Proto   Port
udp    39937
udp       68
udp       68
udp       68
udp    37057
tcp       22
tcp     3389
tcp     3350
tcp    39201
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp    35939
tcp     3389
tcp     3000


_raw: Sat Oct 18 12:11:57 EDT 2025 app=node dest_ip=* dest_port=3000 pid=718281 user=pentester fd=29u ip_version=6 dvc_id=850239 transport=TCP


_raw: Sat Oct 18 12:11:57 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=35939 pid=717672 user=pentester fd=16u ip_version=6 dvc_id=844300 transport=TCP


_raw: Sat Oct 18 12:11:57 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78126 user=xrdp fd=11u ip_version=6 dvc_id=95530 transport=TCP


_raw: Sat Oct 18 12:11:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76823 user=root fd=7u ip_version=6 dvc_id=90853 transport=TCP


_raw: Sat Oct 18 12:11:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76823 user=root fd=6u ip_version=4 dvc_id=90851 transport=TCP


_raw: Sat Oct 18 12:11:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76722 user=root fd=7u ip_version=4 dvc_id=87889 transport=UDP


_raw: Sat Oct 18 12:11:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=1822 transport=UDP


_raw: Sat Oct 18 12:11:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1806 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:11:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95384 transport=TCP


_raw: Sat Oct 18 12:11:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=7u ip_version=6 dvc_id=90832 transport=TCP


_raw: Sat Oct 18 12:11:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=6u ip_version=4 dvc_id=90830 transport=TCP


_raw: Sat Oct 18 12:11:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76529 user=root fd=7u ip_version=4 dvc_id=89061 transport=UDP


_raw: Sat Oct 18 12:11:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw: Sat Oct 18 12:11:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2954 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       53
tcp       22
tcp       22


_raw: Sat Oct 18 12:11:50 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78042 user=xrdp fd=11u ip_version=6 dvc_id=93000 transport=TCP


_raw: Sat Oct 18 12:11:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=7u ip_version=6 dvc_id=91353 transport=TCP


_raw: Sat Oct 18 12:11:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=6u ip_version=4 dvc_id=91351 transport=TCP


_raw: Sat Oct 18 12:11:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76608 user=root fd=7u ip_version=4 dvc_id=89771 transport=UDP


_raw: Sat Oct 18 12:11:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 12:11:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4228 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 12:11:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77818 user=xrdp fd=11u ip_version=6 dvc_id=95506 transport=TCP


_raw: Sat Oct 18 12:11:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=7u ip_version=6 dvc_id=92220 transport=TCP


_raw: Sat Oct 18 12:11:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=6u ip_version=4 dvc_id=92218 transport=TCP


_raw: Sat Oct 18 12:11:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76434 user=root fd=7u ip_version=4 dvc_id=91175 transport=UDP


_raw: Sat Oct 18 12:11:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3619 transport=UDP


_raw: Sat Oct 18 12:11:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=492 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    32957
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:11:44 EDT 2025 app=x-www-browser dest_ip=* dest_port=32957 pid=727537 user=pentester fd=67u ip_version=4 dvc_id=864886 transport=UDP


_raw: Sat Oct 18 12:11:44 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77990 user=xrdp fd=11u ip_version=6 dvc_id=94139 transport=TCP


_raw: Sat Oct 18 12:11:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=7u ip_version=6 dvc_id=90611 transport=TCP


_raw: Sat Oct 18 12:11:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=6u ip_version=4 dvc_id=90609 transport=TCP


_raw: Sat Oct 18 12:11:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76632 user=root fd=7u ip_version=4 dvc_id=91722 transport=UDP


_raw: Sat Oct 18 12:11:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3611 transport=UDP


_raw: Sat Oct 18 12:11:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4119 transport=UDP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=9836 user=pentester fd=37u ip_version=6 dvc_id=65446 transport=TCP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38057 pid=9836 user=pentester fd=16u ip_version=6 dvc_id=63384 transport=TCP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=x-www-browser dest_ip=* dest_port=60643 pid=3078 user=pentester fd=130u ip_version=4 dvc_id=158847 transport=UDP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=940 user=xrdp fd=11u ip_version=6 dvc_id=824 transport=TCP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=7u ip_version=6 dvc_id=4605 transport=TCP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=6u ip_version=4 dvc_id=4603 transport=TCP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=39763 pid=892 user=root fd=9u ip_version=4 dvc_id=4661 transport=TCP


_raw: Sat Oct 18 12:11:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=664 user=root fd=7u ip_version=4 dvc_id=3825 transport=UDP


_raw:
Proto   Port
udp       68
udp    60643
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 12:11:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78238 user=xrdp fd=11u ip_version=6 dvc_id=96589 transport=TCP


_raw: Sat Oct 18 12:11:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76939 user=root fd=7u ip_version=6 dvc_id=89045 transport=TCP


_raw: Sat Oct 18 12:11:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76939 user=root fd=6u ip_version=4 dvc_id=89043 transport=TCP


_raw: Sat Oct 18 12:11:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76838 user=root fd=7u ip_version=4 dvc_id=91492 transport=UDP


_raw: Sat Oct 18 12:11:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2032 transport=UDP


_raw: Sat Oct 18 12:11:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4160 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:11:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78242 user=xrdp fd=11u ip_version=6 dvc_id=95969 transport=TCP


_raw: Sat Oct 18 12:11:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=7u ip_version=6 dvc_id=90108 transport=TCP


_raw: Sat Oct 18 12:11:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=6u ip_version=4 dvc_id=90098 transport=TCP


_raw: Sat Oct 18 12:11:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76812 user=root fd=7u ip_version=4 dvc_id=91280 transport=UDP


_raw: Sat Oct 18 12:11:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3707 transport=UDP


_raw: Sat Oct 18 12:11:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3681 transport=UDP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=722952 user=_gvm fd=4u ip_version=4 dvc_id=952324 transport=TCP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=722949 user=_gvm fd=4u ip_version=4 dvc_id=950797 transport=TCP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=716015 user=postgres fd=7u ip_version=4 dvc_id=838228 transport=TCP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=716001 user=mosquitto fd=5u ip_version=4 dvc_id=840739 transport=TCP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78005 user=xrdp fd=11u ip_version=6 dvc_id=96314 transport=TCP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76750 user=root fd=7u ip_version=6 dvc_id=92238 transport=TCP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76750 user=root fd=6u ip_version=4 dvc_id=92236 transport=TCP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=88061 transport=UDP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2969 transport=UDP


_raw: Sat Oct 18 12:11:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3787 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     5432
tcp     9392
tcp     1883
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp    33274
udp    47863
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:11:33 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=695565 user=root fd=282u ip_version=6 dvc_id=836895 transport=TCP


_raw: Sat Oct 18 12:11:33 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=695565 user=root fd=281u ip_version=6 dvc_id=836889 transport=TCP


_raw: Sat Oct 18 12:11:33 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=96593 transport=TCP


_raw: Sat Oct 18 12:11:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90751 transport=TCP


_raw: Sat Oct 18 12:11:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 12:11:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=90698 transport=UDP


_raw: Sat Oct 18 12:11:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3656 transport=UDP


_raw: Sat Oct 18 12:11:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=1563 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     7687
tcp     7474
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:11:31 EDT 2025 app=x-www-browser dest_ip=* dest_port=47863 pid=714743 user=pentester fd=157u ip_version=4 dvc_id=929439 transport=UDP


_raw: Sat Oct 18 12:11:31 EDT 2025 app=x-www-browser dest_ip=* dest_port=33274 pid=714743 user=pentester fd=71u ip_version=4 dvc_id=929605 transport=UDP


_raw: Sat Oct 18 12:11:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78140 user=xrdp fd=11u ip_version=6 dvc_id=95507 transport=TCP


_raw: Sat Oct 18 12:11:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=7u ip_version=6 dvc_id=88954 transport=TCP


_raw: Sat Oct 18 12:11:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=6u ip_version=4 dvc_id=88952 transport=TCP


_raw: Sat Oct 18 12:11:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76749 user=root fd=7u ip_version=4 dvc_id=88879 transport=UDP


_raw: Sat Oct 18 12:11:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=2040 transport=UDP


_raw: Sat Oct 18 12:11:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2024 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     7474
tcp     7687
tcp     8080
tcp    45363
tcp       22
tcp     3389
tcp     3350
tcp     8081


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 12:11:27 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8081 pid=715265 user=pentester fd=37u ip_version=6 dvc_id=889430 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45363 pid=715265 user=pentester fd=16u ip_version=6 dvc_id=886615 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700806 user=root fd=7u ip_version=4 dvc_id=837927 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=700188 user=root fd=7u ip_version=4 dvc_id=836249 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=700182 user=root fd=7u ip_version=4 dvc_id=834393 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78276 user=xrdp fd=11u ip_version=6 dvc_id=95575 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76927 user=root fd=7u ip_version=6 dvc_id=90743 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76927 user=root fd=6u ip_version=4 dvc_id=90741 transport=TCP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76811 user=root fd=7u ip_version=4 dvc_id=92347 transport=UDP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3599 transport=UDP


_raw: Sat Oct 18 12:11:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=587 transport=UDP


_raw: Sat Oct 18 12:11:26 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=712800 user=pentester fd=222u ip_version=4 dvc_id=847249 transport=UDP


_raw: Sat Oct 18 12:11:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77995 user=xrdp fd=11u ip_version=6 dvc_id=95567 transport=TCP


_raw: Sat Oct 18 12:11:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=7u ip_version=6 dvc_id=91643 transport=TCP


_raw: Sat Oct 18 12:11:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=6u ip_version=4 dvc_id=91641 transport=TCP


_raw: Sat Oct 18 12:11:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76623 user=root fd=7u ip_version=4 dvc_id=89678 transport=UDP


_raw: Sat Oct 18 12:11:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3662 transport=UDP


_raw: Sat Oct 18 12:11:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=580 transport=UDP


_raw:
Proto   Port
udp     5353
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:11:25 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96393 transport=TCP


_raw: Sat Oct 18 12:11:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=7u ip_version=6 dvc_id=88878 transport=TCP


_raw: Sat Oct 18 12:11:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=6u ip_version=4 dvc_id=88876 transport=TCP


_raw: Sat Oct 18 12:11:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=88833 transport=UDP


_raw: Sat Oct 18 12:11:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=692 user=root fd=7u ip_version=4 dvc_id=560 transport=UDP


_raw: Sat Oct 18 12:11:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=610 user=root fd=7u ip_version=4 dvc_id=2748 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:11:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715238 user=pentester fd=37u ip_version=6 dvc_id=845960 transport=TCP


_raw: Sat Oct 18 12:11:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38329 pid=715238 user=pentester fd=16u ip_version=6 dvc_id=845191 transport=TCP


_raw: Sat Oct 18 12:11:21 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77957 user=xrdp fd=11u ip_version=6 dvc_id=94678 transport=TCP


_raw: Sat Oct 18 12:11:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=7u ip_version=6 dvc_id=93212 transport=TCP


_raw: Sat Oct 18 12:11:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=6u ip_version=4 dvc_id=93210 transport=TCP


_raw: Sat Oct 18 12:11:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76597 user=root fd=7u ip_version=4 dvc_id=90691 transport=UDP


_raw: Sat Oct 18 12:11:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3591 transport=UDP


_raw: Sat Oct 18 12:11:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1780 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp    38329
tcp     3350
tcp     8080
tcp     3389


_raw: Sat Oct 18 12:11:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78248 user=xrdp fd=11u ip_version=6 dvc_id=95164 transport=TCP


_raw: Sat Oct 18 12:11:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=7u ip_version=6 dvc_id=91547 transport=TCP


_raw: Sat Oct 18 12:11:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=6u ip_version=4 dvc_id=91545 transport=TCP


_raw: Sat Oct 18 12:11:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76847 user=root fd=7u ip_version=4 dvc_id=91483 transport=UDP


_raw: Sat Oct 18 12:11:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2893 transport=UDP


_raw: Sat Oct 18 12:11:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=3938 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     8081
tcp       22
tcp    39353
tcp    33733
tcp     3350
tcp     3389
tcp       22
tcp     8080


_raw: Sat Oct 18 12:11:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95973 transport=TCP


_raw: Sat Oct 18 12:11:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=7u ip_version=6 dvc_id=89832 transport=TCP


_raw: Sat Oct 18 12:11:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=6u ip_version=4 dvc_id=89830 transport=TCP


_raw: Sat Oct 18 12:11:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=89004 transport=UDP


_raw: Sat Oct 18 12:11:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4122 transport=UDP


_raw: Sat Oct 18 12:11:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=1765 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 12:11:12 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=94192 transport=TCP


_raw: Sat Oct 18 12:11:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=90439 transport=TCP


_raw: Sat Oct 18 12:11:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=90437 transport=TCP


_raw: Sat Oct 18 12:11:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76516 user=root fd=7u ip_version=4 dvc_id=91289 transport=UDP


_raw: Sat Oct 18 12:11:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=894 transport=UDP


_raw: Sat Oct 18 12:11:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1770 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    41220
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 12:11:11 EDT 2025 app=x-www-browser dest_ip=* dest_port=41220 pid=694818 user=pentester fd=115u ip_version=4 dvc_id=1385127 transport=UDP


_raw: Sat Oct 18 12:11:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78348 user=xrdp fd=11u ip_version=6 dvc_id=96419 transport=TCP


_raw: Sat Oct 18 12:11:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=7u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 12:11:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=6u ip_version=4 dvc_id=91955 transport=TCP


_raw: Sat Oct 18 12:11:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76947 user=root fd=7u ip_version=4 dvc_id=91911 transport=UDP


_raw: Sat Oct 18 12:11:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=694 user=root fd=7u ip_version=4 dvc_id=810 transport=UDP


_raw: Sat Oct 18 12:11:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=611 user=root fd=7u ip_version=4 dvc_id=3584 transport=UDP


_raw:
Proto   Port
udp    43455
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    35006
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:11:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78391 user=xrdp fd=11u ip_version=6 dvc_id=97450 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76987 user=root fd=7u ip_version=6 dvc_id=91381 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76987 user=root fd=6u ip_version=4 dvc_id=91379 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76839 user=root fd=7u ip_version=4 dvc_id=89016 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3891 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=537 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77856 user=xrdp fd=11u ip_version=6 dvc_id=95414 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=7u ip_version=6 dvc_id=89956 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=6u ip_version=4 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76497 user=root fd=7u ip_version=4 dvc_id=91466 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=2707 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=x-www-browser dest_ip=* dest_port=35006 pid=712667 user=pentester fd=36u ip_version=4 dvc_id=891468 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77869 user=xrdp fd=11u ip_version=6 dvc_id=94695 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76611 user=root fd=7u ip_version=6 dvc_id=89692 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76611 user=root fd=6u ip_version=4 dvc_id=89682 transport=TCP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76510 user=root fd=7u ip_version=4 dvc_id=91554 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4134 transport=UDP


_raw: Sat Oct 18 12:11:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4101 transport=UDP


_raw: Sat Oct 18 12:11:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=43455 pid=709576 user=pentester fd=91u ip_version=4 dvc_id=1047604 transport=UDP


_raw: Sat Oct 18 12:11:06 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77970 user=xrdp fd=11u ip_version=6 dvc_id=94557 transport=TCP


_raw: Sat Oct 18 12:11:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 12:11:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 12:11:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=90619 transport=UDP


_raw: Sat Oct 18 12:11:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 12:11:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=firefox-esr dest_ip=* dest_port=34238 pid=727355 user=pentester fd=70u ip_version=4 dvc_id=908156 transport=UDP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=firefox-esr dest_ip=* dest_port=37940 pid=727355 user=pentester fd=40u ip_version=4 dvc_id=908410 transport=UDP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77947 user=xrdp fd=11u ip_version=6 dvc_id=94178 transport=TCP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76690 user=root fd=7u ip_version=6 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76690 user=root fd=6u ip_version=4 dvc_id=90739 transport=TCP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76589 user=root fd=7u ip_version=4 dvc_id=91798 transport=UDP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2590 transport=UDP


_raw: Sat Oct 18 12:10:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=461 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    37940
udp    34238
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:10:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78363 user=xrdp fd=11u ip_version=6 dvc_id=94672 transport=TCP


_raw: Sat Oct 18 12:10:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=7u ip_version=6 dvc_id=90053 transport=TCP


_raw: Sat Oct 18 12:10:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=6u ip_version=4 dvc_id=90051 transport=TCP


_raw: Sat Oct 18 12:10:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76946 user=root fd=7u ip_version=4 dvc_id=92362 transport=UDP


_raw: Sat Oct 18 12:10:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=2845 transport=UDP


_raw: Sat Oct 18 12:10:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1583 transport=UDP


_raw: Sat Oct 18 12:10:53 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=94745 transport=TCP


_raw: Sat Oct 18 12:10:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76795 user=root fd=7u ip_version=6 dvc_id=91498 transport=TCP


_raw: Sat Oct 18 12:10:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76795 user=root fd=6u ip_version=4 dvc_id=91488 transport=TCP


_raw: Sat Oct 18 12:10:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76694 user=root fd=7u ip_version=4 dvc_id=93419 transport=UDP


_raw: Sat Oct 18 12:10:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4227 transport=UDP


_raw: Sat Oct 18 12:10:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3498 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     6666
tcp     1080
tcp     9389
tcp      445
tcp     9090
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:10:49 EDT 2025 app=python3 dest_ip=* dest_port=6666 pid=711151 user=root fd=8u ip_version=4 dvc_id=883340 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=python3 dest_ip=* dest_port=9389 pid=711151 user=root fd=7u ip_version=4 dvc_id=882576 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=711151 user=root fd=6u ip_version=4 dvc_id=882575 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=9090 pid=711151 user=root fd=5u ip_version=4 dvc_id=883337 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=711151 user=root fd=4u ip_version=4 dvc_id=881482 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=1080 pid=711151 user=root fd=3u ip_version=4 dvc_id=881481 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=694911 user=pentester fd=217u ip_version=4 dvc_id=829224 transport=UDP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78014 user=xrdp fd=11u ip_version=6 dvc_id=95181 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=7u ip_version=6 dvc_id=89671 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=6u ip_version=4 dvc_id=89661 transport=TCP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76524 user=root fd=7u ip_version=4 dvc_id=90882 transport=UDP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 12:10:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4213 transport=UDP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=714819 user=postgres fd=7u ip_version=4 dvc_id=946209 transport=TCP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=714805 user=mosquitto fd=5u ip_version=4 dvc_id=946193 transport=TCP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78125 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76786 user=root fd=7u ip_version=6 dvc_id=91469 transport=TCP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76786 user=root fd=6u ip_version=4 dvc_id=91467 transport=TCP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76653 user=root fd=7u ip_version=4 dvc_id=91412 transport=UDP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=725 transport=UDP


_raw: Sat Oct 18 12:10:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3671 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     1883
tcp     3350
tcp       22
tcp     5432
tcp     1883
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 12:10:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77998 user=xrdp fd=11u ip_version=6 dvc_id=92996 transport=TCP


_raw: Sat Oct 18 12:10:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76668 user=root fd=7u ip_version=6 dvc_id=88705 transport=TCP


_raw: Sat Oct 18 12:10:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76668 user=root fd=6u ip_version=4 dvc_id=88703 transport=TCP


_raw: Sat Oct 18 12:10:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76552 user=root fd=7u ip_version=4 dvc_id=90065 transport=UDP


_raw: Sat Oct 18 12:10:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=781 transport=UDP


_raw: Sat Oct 18 12:10:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1793 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw: Sat Oct 18 12:10:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77982 user=xrdp fd=11u ip_version=6 dvc_id=93138 transport=TCP


_raw: Sat Oct 18 12:10:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=91432 transport=TCP


_raw: Sat Oct 18 12:10:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=91430 transport=TCP


_raw: Sat Oct 18 12:10:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76508 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 12:10:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4341 transport=UDP


_raw: Sat Oct 18 12:10:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4317 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 12:10:39 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77820 user=xrdp fd=11u ip_version=6 dvc_id=94694 transport=TCP


_raw: Sat Oct 18 12:10:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=7u ip_version=6 dvc_id=89688 transport=TCP


_raw: Sat Oct 18 12:10:39 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=6u ip_version=4 dvc_id=89686 transport=TCP


_raw: Sat Oct 18 12:10:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76467 user=root fd=7u ip_version=4 dvc_id=89631 transport=UDP


_raw: Sat Oct 18 12:10:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=546 transport=UDP


_raw: Sat Oct 18 12:10:39 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=32919 pid=714201 user=pentester fd=170u ip_version=4 dvc_id=1458534 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=57463 pid=714201 user=pentester fd=167u ip_version=4 dvc_id=1458557 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=53376 pid=714201 user=pentester fd=166u ip_version=4 dvc_id=1458545 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=50782 pid=714201 user=pentester fd=165u ip_version=4 dvc_id=1457682 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=54340 pid=714201 user=pentester fd=164u ip_version=4 dvc_id=1460336 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=47997 pid=714201 user=pentester fd=163u ip_version=4 dvc_id=1459668 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=47712 pid=714201 user=pentester fd=160u ip_version=4 dvc_id=1458698 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=x-www-browser dest_ip=* dest_port=58441 pid=714201 user=pentester fd=137u ip_version=4 dvc_id=1460317 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77875 user=xrdp fd=11u ip_version=6 dvc_id=95421 transport=TCP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=92233 transport=TCP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=92231 transport=TCP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89956 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4174 transport=UDP


_raw: Sat Oct 18 12:10:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2684 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 12:10:36 EDT 2025 app=python3 dest_ip=* dest_port=8000 pid=703023 user=pentester fd=3u ip_version=4 dvc_id=848284 transport=TCP


_raw: Sat Oct 18 12:10:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78362 user=xrdp fd=11u ip_version=6 dvc_id=95572 transport=TCP


_raw: Sat Oct 18 12:10:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76983 user=root fd=7u ip_version=6 dvc_id=91756 transport=TCP


_raw: Sat Oct 18 12:10:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76983 user=root fd=6u ip_version=4 dvc_id=91754 transport=TCP


_raw: Sat Oct 18 12:10:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76880 user=root fd=7u ip_version=4 dvc_id=92274 transport=UDP


_raw: Sat Oct 18 12:10:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=2733 transport=UDP


_raw: Sat Oct 18 12:10:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2716 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Sat Oct 18 12:10:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77943 user=xrdp fd=11u ip_version=6 dvc_id=94970 transport=TCP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=7u ip_version=6 dvc_id=89964 transport=TCP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=6u ip_version=4 dvc_id=89962 transport=TCP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92185 transport=UDP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2521 transport=UDP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3717 transport=UDP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77946 user=xrdp fd=11u ip_version=6 dvc_id=93897 transport=TCP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=7u ip_version=6 dvc_id=89034 transport=TCP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=6u ip_version=4 dvc_id=89032 transport=TCP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=91451 transport=UDP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4350 transport=UDP


_raw: Sat Oct 18 12:10:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1804 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 12:10:30 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94680 transport=TCP


_raw: Sat Oct 18 12:10:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=7u ip_version=6 dvc_id=92245 transport=TCP


_raw: Sat Oct 18 12:10:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=6u ip_version=4 dvc_id=92243 transport=TCP