_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 08:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 08:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 08:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 08:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 08:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 08:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 08:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 08:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 08:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 07:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 07:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 07:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 07:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 07:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 07:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 07:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 07:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 07:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 07:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 07:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 07:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 07:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 07:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Thu Nov 27 07:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 07:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 07:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 07:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 07:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 07:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 07:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 07:39:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 07:39:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 07:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 07:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 07:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 07:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 07:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 07:39:17 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 07:39:17 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 07:39:17 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 07:39:17 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 07:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 07:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 07:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 07:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 07:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 07:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 07:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 07:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 07:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 07:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 07:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 07:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 06:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 06:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 06:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 06:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 06:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 06:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 06:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 06:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 06:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 06:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 06:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 06:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 06:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 06:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Thu Nov 27 06:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 06:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 06:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 06:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 06:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 06:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 06:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 06:39:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 06:39:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 06:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 06:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 06:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 06:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 06:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 06:39:17 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 06:39:17 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 06:39:17 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 06:39:17 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 06:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 06:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 06:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 06:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 06:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 06:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 06:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 06:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 06:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 06:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 06:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 06:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 05:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 05:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 05:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 05:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 05:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 05:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 05:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 05:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 05:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 05:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 05:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 05:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 05:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 05:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Thu Nov 27 05:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 05:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 05:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 05:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 05:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 05:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 05:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 05:39:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 05:39:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 05:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 05:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 05:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 05:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 05:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 05:39:17 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 05:39:17 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 05:39:17 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 05:39:17 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 05:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 05:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 05:39:17 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 05:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 05:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 05:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 05:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 05:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 05:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 05:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 05:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 05:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 04:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 04:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 04:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 04:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 04:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 04:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 04:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 04:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 04:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 04:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 04:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 04:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 04:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 04:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Thu Nov 27 04:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 04:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 04:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 04:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 04:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 04:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 04:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 04:39:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 04:39:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 04:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 04:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 04:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 04:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 04:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 04:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 04:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 04:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 04:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 04:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 04:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 04:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 04:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 04:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 04:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 04:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 04:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 04:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 04:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 04:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 04:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 03:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 03:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 03:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 03:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 03:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 03:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 03:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 03:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 03:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 03:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 03:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 03:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 03:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 03:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Thu Nov 27 03:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 03:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 03:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 03:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 03:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 03:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 03:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 03:39:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 03:39:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 03:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 03:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 03:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 03:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 03:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 03:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 03:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 03:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 03:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 03:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 03:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 03:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 03:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 03:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 03:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 03:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 03:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 03:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 03:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 03:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 03:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 02:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 02:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 02:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 02:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 02:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 02:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 02:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 02:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 02:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 02:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 02:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 02:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 02:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 02:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 02:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 02:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 02:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 02:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 02:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 02:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 02:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 02:39:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 02:39:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 02:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 02:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 02:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 02:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 02:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 02:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 02:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 02:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 02:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 02:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 02:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 02:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 02:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 02:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 02:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 02:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 02:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 02:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 02:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 02:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 02:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 01:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 01:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 01:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 01:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 01:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 01:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 01:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 01:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 01:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 01:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 01:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 01:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 01:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 01:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Thu Nov 27 01:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 01:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 01:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 01:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 01:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 01:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 01:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 01:39:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 01:39:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 01:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 01:39:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 01:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 01:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 01:39:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 01:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 01:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 01:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 01:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 01:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 01:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 01:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 01:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 01:37:35 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 01:37:35 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 01:37:35 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 01:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 01:37:35 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 01:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 01:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 01:37:35 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 00:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Thu Nov 27 00:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Thu Nov 27 00:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Thu Nov 27 00:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Thu Nov 27 00:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Thu Nov 27 00:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Thu Nov 27 00:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 00:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Thu Nov 27 00:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Thu Nov 27 00:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Thu Nov 27 00:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Thu Nov 27 00:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Thu Nov 27 00:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Thu Nov 27 00:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Thu Nov 27 00:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Thu Nov 27 00:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Thu Nov 27 00:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Thu Nov 27 00:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Thu Nov 27 00:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Thu Nov 27 00:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Thu Nov 27 00:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Thu Nov 27 00:39:37 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Thu Nov 27 00:39:37 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Thu Nov 27 00:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Thu Nov 27 00:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Thu Nov 27 00:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Thu Nov 27 00:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Thu Nov 27 00:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Thu Nov 27 00:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Thu Nov 27 00:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Thu Nov 27 00:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Thu Nov 27 00:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Thu Nov 27 00:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Thu Nov 27 00:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Thu Nov 27 00:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Thu Nov 27 00:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Thu Nov 27 00:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Thu Nov 27 00:37:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Thu Nov 27 00:37:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Thu Nov 27 00:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Thu Nov 27 00:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Thu Nov 27 00:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Thu Nov 27 00:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Thu Nov 27 00:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 23:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Wed Nov 26 23:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Wed Nov 26 23:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Wed Nov 26 23:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Wed Nov 26 23:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Wed Nov 26 23:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Wed Nov 26 23:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 23:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Wed Nov 26 23:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Wed Nov 26 23:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Wed Nov 26 23:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Wed Nov 26 23:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Wed Nov 26 23:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Wed Nov 26 23:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Wed Nov 26 23:42:42 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Wed Nov 26 23:42:42 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Wed Nov 26 23:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Wed Nov 26 23:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Wed Nov 26 23:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Wed Nov 26 23:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Wed Nov 26 23:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Wed Nov 26 23:39:37 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Wed Nov 26 23:39:37 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Wed Nov 26 23:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Wed Nov 26 23:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Wed Nov 26 23:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Wed Nov 26 23:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Wed Nov 26 23:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 23:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Wed Nov 26 23:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Wed Nov 26 23:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Wed Nov 26 23:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Wed Nov 26 23:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Wed Nov 26 23:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Wed Nov 26 23:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 23:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Wed Nov 26 23:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Wed Nov 26 23:37:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Wed Nov 26 23:37:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Wed Nov 26 23:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Wed Nov 26 23:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Wed Nov 26 23:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Wed Nov 26 23:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Wed Nov 26 23:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 22:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Wed Nov 26 22:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Wed Nov 26 22:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Wed Nov 26 22:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Wed Nov 26 22:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Wed Nov 26 22:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Wed Nov 26 22:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 22:43:30 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Wed Nov 26 22:43:30 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Wed Nov 26 22:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Wed Nov 26 22:43:30 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Wed Nov 26 22:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Wed Nov 26 22:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Wed Nov 26 22:43:30 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Wed Nov 26 22:42:41 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Wed Nov 26 22:42:41 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Wed Nov 26 22:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Wed Nov 26 22:42:41 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Wed Nov 26 22:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Wed Nov 26 22:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Wed Nov 26 22:42:41 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Wed Nov 26 22:39:37 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Wed Nov 26 22:39:37 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Wed Nov 26 22:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Wed Nov 26 22:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Wed Nov 26 22:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Wed Nov 26 22:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Wed Nov 26 22:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 22:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Wed Nov 26 22:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Wed Nov 26 22:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Wed Nov 26 22:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Wed Nov 26 22:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Wed Nov 26 22:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Wed Nov 26 22:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 22:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Wed Nov 26 22:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Wed Nov 26 22:37:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Wed Nov 26 22:37:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Wed Nov 26 22:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Wed Nov 26 22:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Wed Nov 26 22:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Wed Nov 26 22:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Wed Nov 26 22:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 21:44:19 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Wed Nov 26 21:44:19 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Wed Nov 26 21:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Wed Nov 26 21:44:19 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Wed Nov 26 21:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Wed Nov 26 21:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Wed Nov 26 21:44:19 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 21:43:31 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Wed Nov 26 21:43:31 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Wed Nov 26 21:43:31 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Wed Nov 26 21:43:31 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Wed Nov 26 21:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Wed Nov 26 21:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Wed Nov 26 21:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Wed Nov 26 21:42:42 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Wed Nov 26 21:42:42 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Wed Nov 26 21:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Wed Nov 26 21:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Wed Nov 26 21:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Wed Nov 26 21:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Wed Nov 26 21:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Wed Nov 26 21:39:37 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Wed Nov 26 21:39:37 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Wed Nov 26 21:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Wed Nov 26 21:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Wed Nov 26 21:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Wed Nov 26 21:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Wed Nov 26 21:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 21:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Wed Nov 26 21:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Wed Nov 26 21:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Wed Nov 26 21:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Wed Nov 26 21:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Wed Nov 26 21:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Wed Nov 26 21:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 21:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Wed Nov 26 21:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Wed Nov 26 21:37:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Wed Nov 26 21:37:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Wed Nov 26 21:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Wed Nov 26 21:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Wed Nov 26 21:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Wed Nov 26 21:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Wed Nov 26 21:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 20:44:20 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Wed Nov 26 20:44:20 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Wed Nov 26 20:44:20 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Wed Nov 26 20:44:20 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Wed Nov 26 20:44:20 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Wed Nov 26 20:44:20 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Wed Nov 26 20:44:20 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 20:43:31 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Wed Nov 26 20:43:31 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Wed Nov 26 20:43:31 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Wed Nov 26 20:43:31 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Wed Nov 26 20:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Wed Nov 26 20:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Wed Nov 26 20:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Wed Nov 26 20:42:42 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Wed Nov 26 20:42:42 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Wed Nov 26 20:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Wed Nov 26 20:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Wed Nov 26 20:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Wed Nov 26 20:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Wed Nov 26 20:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Wed Nov 26 20:39:37 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Wed Nov 26 20:39:37 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Wed Nov 26 20:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Wed Nov 26 20:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Wed Nov 26 20:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Wed Nov 26 20:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Wed Nov 26 20:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 20:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Wed Nov 26 20:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Wed Nov 26 20:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Wed Nov 26 20:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Wed Nov 26 20:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Wed Nov 26 20:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP


_raw: Wed Nov 26 20:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4561 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 20:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=85392 user=pentester fd=37u ip_version=6 dvc_id=114996 transport=TCP


_raw: Wed Nov 26 20:37:36 EST 2025 app=java dest_ip=127.0.0.1 dest_port=40859 pid=85392 user=pentester fd=16u ip_version=6 dvc_id=114061 transport=TCP


_raw: Wed Nov 26 20:37:36 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79968 user=root fd=13u ip_version=4 dvc_id=97210 transport=TCP


_raw: Wed Nov 26 20:37:36 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78097 user=xrdp fd=11u ip_version=6 dvc_id=96572 transport=TCP


_raw: Wed Nov 26 20:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=7u ip_version=6 dvc_id=90915 transport=TCP


_raw: Wed Nov 26 20:37:36 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76841 user=root fd=6u ip_version=4 dvc_id=90913 transport=TCP


_raw: Wed Nov 26 20:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76739 user=root fd=7u ip_version=4 dvc_id=90844 transport=UDP


_raw: Wed Nov 26 20:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4151 transport=UDP


_raw: Wed Nov 26 20:37:36 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=568 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 19:44:20 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80061 user=root fd=13u ip_version=4 dvc_id=101157 transport=TCP


_raw: Wed Nov 26 19:44:20 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93948 transport=TCP


_raw: Wed Nov 26 19:44:20 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=7u ip_version=6 dvc_id=93247 transport=TCP


_raw: Wed Nov 26 19:44:20 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76721 user=root fd=6u ip_version=4 dvc_id=93237 transport=TCP


_raw: Wed Nov 26 19:44:20 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76620 user=root fd=7u ip_version=4 dvc_id=90105 transport=UDP


_raw: Wed Nov 26 19:44:20 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Wed Nov 26 19:44:20 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3655 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Wed Nov 26 19:43:31 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80126 user=root fd=13u ip_version=4 dvc_id=103464 transport=TCP


_raw: Wed Nov 26 19:43:31 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=95949 transport=TCP


_raw: Wed Nov 26 19:43:31 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=7u ip_version=6 dvc_id=91769 transport=TCP


_raw: Wed Nov 26 19:43:31 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76783 user=root fd=6u ip_version=4 dvc_id=91767 transport=TCP


_raw: Wed Nov 26 19:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76682 user=root fd=7u ip_version=4 dvc_id=91707 transport=UDP


_raw: Wed Nov 26 19:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=521 transport=UDP


_raw: Wed Nov 26 19:43:31 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4159 transport=UDP


_raw: Wed Nov 26 19:42:42 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79882 user=root fd=13u ip_version=4 dvc_id=102642 transport=TCP


_raw: Wed Nov 26 19:42:42 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78069 user=xrdp fd=11u ip_version=6 dvc_id=93170 transport=TCP


_raw: Wed Nov 26 19:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=7u ip_version=6 dvc_id=92474 transport=TCP


_raw: Wed Nov 26 19:42:42 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76812 user=root fd=6u ip_version=4 dvc_id=92472 transport=TCP


_raw: Wed Nov 26 19:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76710 user=root fd=7u ip_version=4 dvc_id=92405 transport=UDP


_raw: Wed Nov 26 19:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1581 transport=UDP


_raw: Wed Nov 26 19:42:42 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=4427 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    40859
tcp     8080
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw: Wed Nov 26 19:39:37 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=80115 user=root fd=13u ip_version=4 dvc_id=99241 transport=TCP


_raw: Wed Nov 26 19:39:37 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78018 user=xrdp fd=11u ip_version=6 dvc_id=96655 transport=TCP


_raw: Wed Nov 26 19:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=7u ip_version=6 dvc_id=93341 transport=TCP


_raw: Wed Nov 26 19:39:37 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76751 user=root fd=6u ip_version=4 dvc_id=93339 transport=TCP


_raw: Wed Nov 26 19:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=92399 transport=UDP


_raw: Wed Nov 26 19:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=358 transport=UDP


_raw: Wed Nov 26 19:39:37 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2715 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Wed Nov 26 19:39:18 EST 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=79837 user=root fd=13u ip_version=4 dvc_id=98511 transport=TCP


_raw: Wed Nov 26 19:39:18 EST 2025 app=xrdp dest_ip=* dest_port=3389 pid=78021 user=xrdp fd=11u ip_version=6 dvc_id=94768 transport=TCP


_raw: Wed Nov 26 19:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=7u ip_version=6 dvc_id=92646 transport=TCP


_raw: Wed Nov 26 19:39:18 EST 2025 app=sshd dest_ip=* dest_port=22 pid=76764 user=root fd=6u ip_version=4 dvc_id=92644 transport=TCP


_raw: Wed Nov 26 19:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=76663 user=root fd=7u ip_version=4 dvc_id=90689 transport=UDP


_raw: Wed Nov 26 19:39:18 EST 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4575 transport=UDP