_raw: Sat Oct 18 11:52:35 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=728090 user=root fd=7u ip_version=4 dvc_id=987445 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728081 user=root fd=7u ip_version=6 dvc_id=987419 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728075 user=root fd=7u ip_version=4 dvc_id=987418 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727790 user=root fd=7u ip_version=6 dvc_id=986002 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727783 user=root fd=7u ip_version=4 dvc_id=986001 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717116 user=root fd=7u ip_version=6 dvc_id=944991 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717109 user=root fd=7u ip_version=4 dvc_id=944990 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=x-www-browser dest_ip=* dest_port=39611 pid=714541 user=pentester fd=71u ip_version=4 dvc_id=2948708 transport=UDP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78080 user=xrdp fd=11u ip_version=6 dvc_id=96453 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=7u ip_version=6 dvc_id=91396 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=6u ip_version=4 dvc_id=91394 transport=TCP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76647 user=root fd=7u ip_version=4 dvc_id=88050 transport=UDP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=996 transport=UDP


_raw: Sat Oct 18 11:52:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2751 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     9392
tcp     8000
tcp     5432
tcp     1883
tcp       80
tcp     8889
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 11:52:27 EDT 2025 app=firefox-esr dest_ip=* dest_port=52736 pid=18954 user=pentester fd=257u ip_version=4 dvc_id=134906 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=firefox-esr dest_ip=* dest_port=47454 pid=18954 user=pentester fd=251u ip_version=4 dvc_id=138074 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=firefox-esr dest_ip=* dest_port=58263 pid=18954 user=pentester fd=239u ip_version=4 dvc_id=135897 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=firefox-esr dest_ip=* dest_port=49319 pid=18954 user=pentester fd=193u ip_version=4 dvc_id=133898 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=firefox-esr dest_ip=* dest_port=46372 pid=18954 user=pentester fd=189u ip_version=4 dvc_id=132043 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=firefox-esr dest_ip=* dest_port=33181 pid=18954 user=pentester fd=177u ip_version=4 dvc_id=132051 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=firefox-esr dest_ip=* dest_port=51139 pid=18954 user=pentester fd=163u ip_version=4 dvc_id=138437 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=14237 user=pentester fd=37u ip_version=6 dvc_id=81843 transport=TCP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41205 pid=14237 user=pentester fd=14u ip_version=6 dvc_id=84268 transport=TCP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=kdeconnectd dest_ip=* dest_port=53879 pid=2183 user=pentester fd=23u ip_version=6 dvc_id=11661 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=kdeconnectd dest_ip=* dest_port=33773 pid=2183 user=pentester fd=22u ip_version=4 dvc_id=11660 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=21u ip_version=6 dvc_id=11658 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=20u ip_version=4 dvc_id=11657 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=19u ip_version=6 dvc_id=12794 transport=TCP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=18u ip_version=6 dvc_id=12793 transport=UDP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=934 user=xrdp fd=11u ip_version=6 dvc_id=5378 transport=TCP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=7u ip_version=6 dvc_id=4586 transport=TCP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=6u ip_version=4 dvc_id=4576 transport=TCP


_raw: Sat Oct 18 11:52:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=667 user=root fd=7u ip_version=4 dvc_id=760 transport=UDP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726263 user=pentester fd=37u ip_version=6 dvc_id=967490 transport=TCP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38003 pid=726263 user=pentester fd=16u ip_version=6 dvc_id=965488 transport=TCP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=firefox-esr dest_ip=* dest_port=51646 pid=723862 user=pentester fd=136u ip_version=4 dvc_id=1033150 transport=UDP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=firefox-esr dest_ip=* dest_port=54065 pid=723862 user=pentester fd=103u ip_version=4 dvc_id=1033159 transport=UDP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77878 user=xrdp fd=11u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=7u ip_version=6 dvc_id=89945 transport=TCP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=6u ip_version=4 dvc_id=89943 transport=TCP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76488 user=root fd=7u ip_version=4 dvc_id=90481 transport=UDP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4267 transport=UDP


_raw: Sat Oct 18 11:52:26 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1011 transport=UDP


_raw:
Proto   Port
udp    51646
udp       68
udp       68
udp       68
udp    54065
tcp       22
tcp     3350
tcp    38003
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp    33791
tcp     3389


_raw: Sat Oct 18 11:52:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78073 user=xrdp fd=11u ip_version=6 dvc_id=95019 transport=TCP


_raw: Sat Oct 18 11:52:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76744 user=root fd=7u ip_version=6 dvc_id=91366 transport=TCP


_raw: Sat Oct 18 11:52:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76744 user=root fd=6u ip_version=4 dvc_id=91364 transport=TCP


_raw: Sat Oct 18 11:52:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76643 user=root fd=7u ip_version=4 dvc_id=88998 transport=UDP


_raw: Sat Oct 18 11:52:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=922 transport=UDP


_raw: Sat Oct 18 11:52:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=3636 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    56816
tcp       22
tcp     8889
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp       22
tcp     8080
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp     5353
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:52:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78107 user=xrdp fd=11u ip_version=6 dvc_id=94813 transport=TCP


_raw: Sat Oct 18 11:52:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=7u ip_version=6 dvc_id=92237 transport=TCP


_raw: Sat Oct 18 11:52:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 11:52:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76706 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 11:52:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 11:52:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3580 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp    38329
tcp     3350
tcp     8080
tcp     3389


_raw: Sat Oct 18 11:52:12 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77974 user=xrdp fd=11u ip_version=6 dvc_id=93705 transport=TCP


_raw: Sat Oct 18 11:52:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=92193 transport=TCP


_raw: Sat Oct 18 11:52:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=92191 transport=TCP


_raw: Sat Oct 18 11:52:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=89070 transport=UDP


_raw: Sat Oct 18 11:52:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4280 transport=UDP


_raw: Sat Oct 18 11:52:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3762 transport=UDP


_raw: Sat Oct 18 11:52:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77944 user=xrdp fd=11u ip_version=6 dvc_id=94197 transport=TCP


_raw: Sat Oct 18 11:52:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=7u ip_version=6 dvc_id=91593 transport=TCP


_raw: Sat Oct 18 11:52:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=6u ip_version=4 dvc_id=91583 transport=TCP


_raw: Sat Oct 18 11:52:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=90521 transport=UDP


_raw: Sat Oct 18 11:52:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=841 transport=UDP


_raw: Sat Oct 18 11:52:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=3590 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     1883
tcp     5432
tcp     9392
tcp       80
tcp       22
tcp     6379
tcp     3389
tcp     3350
tcp     6379
tcp     1883
tcp     5432
tcp       22


_raw: Sat Oct 18 11:52:07 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=728177 user=_gvm fd=4u ip_version=4 dvc_id=934021 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=728174 user=_gvm fd=4u ip_version=4 dvc_id=934022 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=722742 user=postgres fd=7u ip_version=4 dvc_id=886146 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=redis-server dest_ip=127.0.0.1 dest_port=6379 pid=721622 user=redis fd=8u ip_version=4 dvc_id=873373 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=721232 user=mosquitto fd=5u ip_version=4 dvc_id=870055 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78056 user=xrdp fd=11u ip_version=6 dvc_id=94759 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=7u ip_version=6 dvc_id=90769 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=6u ip_version=4 dvc_id=90759 transport=TCP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76695 user=root fd=7u ip_version=4 dvc_id=89933 transport=UDP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=695 user=root fd=7u ip_version=4 dvc_id=458 transport=UDP


_raw: Sat Oct 18 11:52:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=1673 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 11:52:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78348 user=xrdp fd=11u ip_version=6 dvc_id=96419 transport=TCP


_raw: Sat Oct 18 11:52:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=7u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 11:52:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=6u ip_version=4 dvc_id=91955 transport=TCP


_raw: Sat Oct 18 11:52:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76947 user=root fd=7u ip_version=4 dvc_id=91911 transport=UDP


_raw: Sat Oct 18 11:52:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=694 user=root fd=7u ip_version=4 dvc_id=810 transport=UDP


_raw: Sat Oct 18 11:52:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=611 user=root fd=7u ip_version=4 dvc_id=3584 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp    35939
tcp     3389
tcp     3000


_raw: Sat Oct 18 11:51:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95384 transport=TCP


_raw: Sat Oct 18 11:51:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=7u ip_version=6 dvc_id=90832 transport=TCP


_raw: Sat Oct 18 11:51:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=6u ip_version=4 dvc_id=90830 transport=TCP


_raw: Sat Oct 18 11:51:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76529 user=root fd=7u ip_version=4 dvc_id=89061 transport=UDP


_raw: Sat Oct 18 11:51:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw: Sat Oct 18 11:51:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2954 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:51:48 EDT 2025 app=node dest_ip=* dest_port=3000 pid=718281 user=pentester fd=29u ip_version=6 dvc_id=850239 transport=TCP


_raw: Sat Oct 18 11:51:48 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=35939 pid=717672 user=pentester fd=16u ip_version=6 dvc_id=844300 transport=TCP


_raw: Sat Oct 18 11:51:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78126 user=xrdp fd=11u ip_version=6 dvc_id=95530 transport=TCP


_raw: Sat Oct 18 11:51:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76823 user=root fd=7u ip_version=6 dvc_id=90853 transport=TCP


_raw: Sat Oct 18 11:51:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76823 user=root fd=6u ip_version=4 dvc_id=90851 transport=TCP


_raw: Sat Oct 18 11:51:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76722 user=root fd=7u ip_version=4 dvc_id=87889 transport=UDP


_raw: Sat Oct 18 11:51:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=1822 transport=UDP


_raw: Sat Oct 18 11:51:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1806 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:51:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78363 user=xrdp fd=11u ip_version=6 dvc_id=94672 transport=TCP


_raw: Sat Oct 18 11:51:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=7u ip_version=6 dvc_id=90053 transport=TCP


_raw: Sat Oct 18 11:51:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=6u ip_version=4 dvc_id=90051 transport=TCP


_raw: Sat Oct 18 11:51:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76946 user=root fd=7u ip_version=4 dvc_id=92362 transport=UDP


_raw: Sat Oct 18 11:51:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=2845 transport=UDP


_raw: Sat Oct 18 11:51:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1583 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 11:51:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95733 transport=TCP


_raw: Sat Oct 18 11:51:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=7u ip_version=6 dvc_id=90801 transport=TCP


_raw: Sat Oct 18 11:51:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=6u ip_version=4 dvc_id=90799 transport=TCP


_raw: Sat Oct 18 11:51:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76534 user=root fd=7u ip_version=4 dvc_id=90719 transport=UDP


_raw: Sat Oct 18 11:51:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=5139 transport=UDP


_raw: Sat Oct 18 11:51:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=3054 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    47272
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 11:51:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78131 user=xrdp fd=11u ip_version=6 dvc_id=94741 transport=TCP


_raw: Sat Oct 18 11:51:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=7u ip_version=6 dvc_id=93230 transport=TCP


_raw: Sat Oct 18 11:51:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=6u ip_version=4 dvc_id=93220 transport=TCP


_raw: Sat Oct 18 11:51:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76773 user=root fd=7u ip_version=4 dvc_id=91380 transport=UDP


_raw: Sat Oct 18 11:51:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1578 transport=UDP


_raw: Sat Oct 18 11:51:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=2581 transport=UDP


_raw: Sat Oct 18 11:51:32 EDT 2025 app=firefox-esr dest_ip=* dest_port=39684 pid=723099 user=pentester fd=83u ip_version=4 dvc_id=875910 transport=UDP


_raw: Sat Oct 18 11:51:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77820 user=xrdp fd=11u ip_version=6 dvc_id=94694 transport=TCP


_raw: Sat Oct 18 11:51:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=7u ip_version=6 dvc_id=89688 transport=TCP


_raw: Sat Oct 18 11:51:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=6u ip_version=4 dvc_id=89686 transport=TCP


_raw: Sat Oct 18 11:51:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76467 user=root fd=7u ip_version=4 dvc_id=89631 transport=UDP


_raw: Sat Oct 18 11:51:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=546 transport=UDP


_raw: Sat Oct 18 11:51:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    39684
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp     8000
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp    56956
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    34421
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    39353
tcp    33733
tcp     3350
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     6010
tcp     6010
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:51:12 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=39353 pid=723874 user=pentester fd=36u ip_version=4 dvc_id=872019 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=721701 user=pentester fd=37u ip_version=6 dvc_id=859538 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33733 pid=721701 user=pentester fd=16u ip_version=6 dvc_id=860698 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77926 user=xrdp fd=11u ip_version=6 dvc_id=95531 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90892 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90890 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=92282 transport=UDP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=2805 transport=UDP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2790 transport=UDP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78248 user=xrdp fd=11u ip_version=6 dvc_id=95164 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=7u ip_version=6 dvc_id=91547 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=6u ip_version=4 dvc_id=91545 transport=TCP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76847 user=root fd=7u ip_version=4 dvc_id=91483 transport=UDP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2893 transport=UDP


_raw: Sat Oct 18 11:51:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=3938 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    37785
udp    47426
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=39521 pid=702388 user=pentester fd=180u ip_version=4 dvc_id=884996 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=49535 pid=702388 user=pentester fd=177u ip_version=4 dvc_id=885947 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=60549 pid=702388 user=pentester fd=175u ip_version=4 dvc_id=884995 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=57038 pid=702388 user=pentester fd=170u ip_version=4 dvc_id=883587 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=55109 pid=702388 user=pentester fd=160u ip_version=4 dvc_id=885946 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=54246 pid=702388 user=pentester fd=155u ip_version=4 dvc_id=885938 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=38994 pid=702388 user=pentester fd=154u ip_version=4 dvc_id=884967 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=40107 pid=702388 user=pentester fd=153u ip_version=4 dvc_id=883566 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=53569 pid=702388 user=pentester fd=152u ip_version=4 dvc_id=884966 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=53031 pid=702388 user=pentester fd=151u ip_version=4 dvc_id=884965 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=38602 pid=702388 user=pentester fd=150u ip_version=4 dvc_id=883558 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=55009 pid=702388 user=pentester fd=149u ip_version=4 dvc_id=883561 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=38737 pid=702388 user=pentester fd=148u ip_version=4 dvc_id=884089 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=48498 pid=702388 user=pentester fd=146u ip_version=4 dvc_id=885926 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=51084 pid=702388 user=pentester fd=100u ip_version=4 dvc_id=883552 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=32946 pid=702388 user=pentester fd=64u ip_version=4 dvc_id=883548 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78062 user=xrdp fd=11u ip_version=6 dvc_id=96395 transport=TCP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=7u ip_version=6 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=6u ip_version=4 dvc_id=91656 transport=TCP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76616 user=root fd=7u ip_version=4 dvc_id=90856 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4271 transport=UDP


_raw: Sat Oct 18 11:51:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3860 transport=UDP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=firefox-esr dest_ip=* dest_port=47426 pid=715035 user=pentester fd=162u ip_version=4 dvc_id=897311 transport=UDP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=firefox-esr dest_ip=* dest_port=37785 pid=715035 user=pentester fd=61u ip_version=4 dvc_id=897312 transport=UDP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78248 user=xrdp fd=11u ip_version=6 dvc_id=97325 transport=TCP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77010 user=root fd=7u ip_version=6 dvc_id=92274 transport=TCP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77010 user=root fd=6u ip_version=4 dvc_id=92264 transport=TCP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76909 user=root fd=7u ip_version=4 dvc_id=89894 transport=UDP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2570 transport=UDP


_raw: Sat Oct 18 11:51:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=1642 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    41637
tcp     3350
tcp       22
tcp     3389
tcp     8080


_raw: Sat Oct 18 11:50:58 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=702484 user=pentester fd=37u ip_version=6 dvc_id=844998 transport=TCP


_raw: Sat Oct 18 11:50:58 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41637 pid=702484 user=pentester fd=16u ip_version=6 dvc_id=835590 transport=TCP


_raw: Sat Oct 18 11:50:58 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78320 user=xrdp fd=11u ip_version=6 dvc_id=96596 transport=TCP


_raw: Sat Oct 18 11:50:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=7u ip_version=6 dvc_id=89734 transport=TCP


_raw: Sat Oct 18 11:50:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=6u ip_version=4 dvc_id=89732 transport=TCP


_raw: Sat Oct 18 11:50:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76840 user=root fd=7u ip_version=4 dvc_id=91666 transport=UDP


_raw: Sat Oct 18 11:50:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4032 transport=UDP


_raw: Sat Oct 18 11:50:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2773 transport=UDP


_raw:
Proto   Port
udp    39903
udp       68
udp       68
udp       68
udp    38222
udp    42821
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    42559
tcp     8080
tcp       22
tcp     3350


_raw: Sat Oct 18 11:50:50 EDT 2025 file_hash=SHA2-256(stdin)= 4fbfa98c034b975ab46dfa4eb9a2b01958d2cf9fae26dd2c2fbd4e1edba0b106


_raw: Sat Oct 18 11:50:50 EDT 2025 app=x-www-browser dest_ip=* dest_port=38830 pid=692356 user=pentester fd=48u ip_version=4 dvc_id=881604 transport=UDP


_raw: Sat Oct 18 11:50:50 EDT 2025 app=x-www-browser dest_ip=* dest_port=50187 pid=692356 user=pentester fd=30u ip_version=4 dvc_id=881601 transport=UDP


_raw: Sat Oct 18 11:50:50 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77992 user=xrdp fd=11u ip_version=6 dvc_id=96357 transport=TCP


_raw: Sat Oct 18 11:50:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=89778 transport=TCP


_raw: Sat Oct 18 11:50:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=89776 transport=TCP


_raw: Sat Oct 18 11:50:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=90671 transport=UDP


_raw: Sat Oct 18 11:50:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=804 transport=UDP


_raw: Sat Oct 18 11:50:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2658 transport=UDP


_raw:
Proto   Port
udp    38830
udp       68
udp       68
udp       68
udp    50187
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    56917
udp       68
udp       68
udp       68
udp    49517
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:50:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=94745 transport=TCP


_raw: Sat Oct 18 11:50:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76795 user=root fd=7u ip_version=6 dvc_id=91498 transport=TCP


_raw: Sat Oct 18 11:50:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76795 user=root fd=6u ip_version=4 dvc_id=91488 transport=TCP


_raw: Sat Oct 18 11:50:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76694 user=root fd=7u ip_version=4 dvc_id=93419 transport=UDP


_raw: Sat Oct 18 11:50:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4227 transport=UDP


_raw: Sat Oct 18 11:50:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3498 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     6666
tcp     1080
tcp     9389
tcp      445
tcp     9090
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:50:42 EDT 2025 app=python3 dest_ip=* dest_port=6666 pid=711151 user=root fd=8u ip_version=4 dvc_id=883340 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=python3 dest_ip=* dest_port=9389 pid=711151 user=root fd=7u ip_version=4 dvc_id=882576 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=711151 user=root fd=6u ip_version=4 dvc_id=882575 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=9090 pid=711151 user=root fd=5u ip_version=4 dvc_id=883337 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=711151 user=root fd=4u ip_version=4 dvc_id=881482 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=python3 dest_ip=127.0.0.1 dest_port=1080 pid=711151 user=root fd=3u ip_version=4 dvc_id=881481 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=694911 user=pentester fd=217u ip_version=4 dvc_id=829224 transport=UDP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78014 user=xrdp fd=11u ip_version=6 dvc_id=95181 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=7u ip_version=6 dvc_id=89671 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=6u ip_version=4 dvc_id=89661 transport=TCP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76524 user=root fd=7u ip_version=4 dvc_id=90882 transport=UDP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 11:50:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4213 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:50:37 EDT 2025 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=725419 user=_bloodhound fd=8u ip_version=4 dvc_id=909184 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=bhapi dest_ip=* dest_port=2112 pid=725419 user=_bloodhound fd=6u ip_version=6 dvc_id=910425 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=724601 user=root fd=282u ip_version=6 dvc_id=906597 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=724601 user=root fd=281u ip_version=6 dvc_id=906591 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=724493 user=postgres fd=7u ip_version=4 dvc_id=906373 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=python3 dest_ip=* dest_port=6666 pid=724050 user=pentester fd=6u ip_version=4 dvc_id=905929 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=python3 dest_ip=* dest_port=9389 pid=724050 user=pentester fd=5u ip_version=4 dvc_id=901597 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=724050 user=pentester fd=4u ip_version=4 dvc_id=903639 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=724050 user=pentester fd=3u ip_version=4 dvc_id=904546 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77883 user=xrdp fd=11u ip_version=6 dvc_id=94500 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76569 user=root fd=7u ip_version=6 dvc_id=90505 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76569 user=root fd=6u ip_version=4 dvc_id=90503 transport=TCP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76469 user=root fd=7u ip_version=4 dvc_id=90452 transport=UDP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2585 transport=UDP


_raw: Sat Oct 18 11:50:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3992 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     9389
tcp       80
tcp       22
tcp      445
tcp     8080
tcp     5432
tcp     6666
tcp     5432
tcp     7474
tcp       22
tcp     7687
tcp     3350
tcp     3389
tcp     2112


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 11:50:32 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=9836 user=pentester fd=37u ip_version=6 dvc_id=65446 transport=TCP


_raw: Sat Oct 18 11:50:32 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38057 pid=9836 user=pentester fd=16u ip_version=6 dvc_id=63384 transport=TCP


_raw: Sat Oct 18 11:50:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=940 user=xrdp fd=11u ip_version=6 dvc_id=824 transport=TCP


_raw: Sat Oct 18 11:50:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=7u ip_version=6 dvc_id=4605 transport=TCP


_raw: Sat Oct 18 11:50:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=6u ip_version=4 dvc_id=4603 transport=TCP


_raw: Sat Oct 18 11:50:32 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=39763 pid=892 user=root fd=9u ip_version=4 dvc_id=4661 transport=TCP


_raw: Sat Oct 18 11:50:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=664 user=root fd=7u ip_version=4 dvc_id=3825 transport=UDP


_raw:
Proto   Port
udp       68
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    35765
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 11:50:30 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78201 user=xrdp fd=11u ip_version=6 dvc_id=96489 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=7u ip_version=6 dvc_id=90905 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=6u ip_version=4 dvc_id=90903 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76842 user=root fd=7u ip_version=4 dvc_id=92211 transport=UDP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3919 transport=UDP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3904 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:50:30 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715926 user=pentester fd=37u ip_version=6 dvc_id=854060 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45661 pid=715926 user=pentester fd=16u ip_version=6 dvc_id=854051 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77938 user=xrdp fd=11u ip_version=6 dvc_id=96351 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=7u ip_version=6 dvc_id=91458 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=6u ip_version=4 dvc_id=91456 transport=TCP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76582 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=3573 transport=UDP


_raw: Sat Oct 18 11:50:30 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=5146 transport=UDP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=52424 pid=714201 user=pentester fd=162u ip_version=4 dvc_id=905337 transport=UDP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=x-www-browser dest_ip=* dest_port=35765 pid=714201 user=pentester fd=150u ip_version=4 dvc_id=904418 transport=UDP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77875 user=xrdp fd=11u ip_version=6 dvc_id=95421 transport=TCP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=92233 transport=TCP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=92231 transport=TCP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89956 transport=UDP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4174 transport=UDP


_raw: Sat Oct 18 11:50:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2684 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     7687
tcp     7474
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:50:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78058 user=xrdp fd=11u ip_version=6 dvc_id=95114 transport=TCP


_raw: Sat Oct 18 11:50:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=92229 transport=TCP


_raw: Sat Oct 18 11:50:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 11:50:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=92166 transport=UDP


_raw: Sat Oct 18 11:50:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw: Sat Oct 18 11:50:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=579 transport=UDP


_raw:
Proto   Port
udp    52605
udp       68
udp       68
udp       68
udp    38957
tcp       22
tcp     8889
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:50:15 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77914 user=xrdp fd=11u ip_version=6 dvc_id=95597 transport=TCP


_raw: Sat Oct 18 11:50:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=91656 transport=TCP


_raw: Sat Oct 18 11:50:15 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=91654 transport=TCP


_raw: Sat Oct 18 11:50:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76509 user=root fd=7u ip_version=4 dvc_id=90037 transport=UDP


_raw: Sat Oct 18 11:50:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=5139 transport=UDP


_raw: Sat Oct 18 11:50:15 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=4199 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22
tcp    38441


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp     8080
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:50:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=724652 user=pentester fd=37u ip_version=6 dvc_id=854719 transport=TCP


_raw: Sat Oct 18 11:50:09 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38441 pid=724652 user=pentester fd=34u ip_version=6 dvc_id=856554 transport=TCP


_raw: Sat Oct 18 11:50:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78065 user=xrdp fd=11u ip_version=6 dvc_id=93056 transport=TCP


_raw: Sat Oct 18 11:50:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=91036 transport=TCP


_raw: Sat Oct 18 11:50:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=91034 transport=TCP


_raw: Sat Oct 18 11:50:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76664 user=root fd=7u ip_version=4 dvc_id=90961 transport=UDP


_raw: Sat Oct 18 11:50:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4102 transport=UDP


_raw: Sat Oct 18 11:50:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=537 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw: Sat Oct 18 11:50:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78253 user=xrdp fd=11u ip_version=6 dvc_id=94909 transport=TCP


_raw: Sat Oct 18 11:50:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=7u ip_version=6 dvc_id=89930 transport=TCP


_raw: Sat Oct 18 11:50:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=6u ip_version=4 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 11:50:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76890 user=root fd=7u ip_version=4 dvc_id=89862 transport=UDP


_raw: Sat Oct 18 11:50:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3570 transport=UDP


_raw: Sat Oct 18 11:50:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=3067 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 11:50:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78391 user=xrdp fd=11u ip_version=6 dvc_id=97450 transport=TCP


_raw: Sat Oct 18 11:50:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76987 user=root fd=7u ip_version=6 dvc_id=91381 transport=TCP


_raw: Sat Oct 18 11:50:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76987 user=root fd=6u ip_version=4 dvc_id=91379 transport=TCP


_raw: Sat Oct 18 11:50:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76839 user=root fd=7u ip_version=4 dvc_id=89016 transport=UDP


_raw: Sat Oct 18 11:50:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3891 transport=UDP


_raw: Sat Oct 18 11:50:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=537 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     8080
tcp       22
tcp    43765
tcp     3389


_raw: Sat Oct 18 11:49:55 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=719083 user=pentester fd=37u ip_version=6 dvc_id=859298 transport=TCP


_raw: Sat Oct 18 11:49:55 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=43765 pid=719083 user=pentester fd=16u ip_version=6 dvc_id=858207 transport=TCP


_raw: Sat Oct 18 11:49:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78160 user=xrdp fd=11u ip_version=6 dvc_id=94017 transport=TCP


_raw: Sat Oct 18 11:49:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=7u ip_version=6 dvc_id=91328 transport=TCP


_raw: Sat Oct 18 11:49:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=6u ip_version=4 dvc_id=91326 transport=TCP


_raw: Sat Oct 18 11:49:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76805 user=root fd=7u ip_version=4 dvc_id=92243 transport=UDP


_raw: Sat Oct 18 11:49:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4112 transport=UDP


_raw: Sat Oct 18 11:49:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1973 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    41637
tcp     3350
tcp       22
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    59678
tcp     9090
tcp     8889
tcp      443
tcp       22
tcp       80
tcp     3350
tcp    38179
tcp       22
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     3350
tcp    37181
tcp       22
tcp     3389
tcp     8080


_raw: Sat Oct 18 11:49:42 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=703595 user=pentester fd=37u ip_version=6 dvc_id=837923 transport=TCP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37181 pid=703595 user=pentester fd=16u ip_version=6 dvc_id=835237 transport=TCP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=696473 user=pentester fd=222u ip_version=4 dvc_id=855089 transport=UDP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77973 user=xrdp fd=11u ip_version=6 dvc_id=95395 transport=TCP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=7u ip_version=6 dvc_id=89887 transport=TCP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=6u ip_version=4 dvc_id=89885 transport=TCP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76514 user=root fd=7u ip_version=4 dvc_id=89845 transport=UDP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4343 transport=UDP


_raw: Sat Oct 18 11:49:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2834 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     6666
tcp     1080
tcp     9389
tcp      445
tcp     8889
tcp     9090
tcp       80
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    42270
tcp       22
tcp     5432
tcp       22
tcp     3350
tcp     5432
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:49:35 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=95557 transport=TCP


_raw: Sat Oct 18 11:49:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76630 user=root fd=7u ip_version=6 dvc_id=91692 transport=TCP


_raw: Sat Oct 18 11:49:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76630 user=root fd=6u ip_version=4 dvc_id=91690 transport=TCP


_raw: Sat Oct 18 11:49:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76514 user=root fd=7u ip_version=4 dvc_id=89652 transport=UDP


_raw: Sat Oct 18 11:49:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4208 transport=UDP


_raw: Sat Oct 18 11:49:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=817 transport=UDP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=719346 user=postgres fd=7u ip_version=4 dvc_id=860770 transport=TCP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=firefox-esr dest_ip=* dest_port=42270 pid=711712 user=pentester fd=104u ip_version=4 dvc_id=886922 transport=UDP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94054 transport=TCP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=88024 transport=TCP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=88014 transport=TCP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=89082 transport=UDP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=479 transport=UDP


_raw: Sat Oct 18 11:49:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4293 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      137
udp      137
udp      137
udp      138
udp      138
udp      138
tcp     8889
tcp      139
tcp       22
tcp      445
tcp      139
tcp       22
tcp      445
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       53
udp       68
tcp       53
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:49:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77943 user=xrdp fd=11u ip_version=6 dvc_id=94970 transport=TCP


_raw: Sat Oct 18 11:49:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=7u ip_version=6 dvc_id=89964 transport=TCP


_raw: Sat Oct 18 11:49:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=6u ip_version=4 dvc_id=89962 transport=TCP


_raw: Sat Oct 18 11:49:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92185 transport=UDP


_raw: Sat Oct 18 11:49:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2521 transport=UDP


_raw: Sat Oct 18 11:49:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3717 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp     8889
tcp       22
tcp     3389
tcp     1433
tcp     1883
tcp     5985
tcp     5986
tcp      139
tcp      143
tcp      135
tcp       25
tcp       21
tcp       22
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp    45495
tcp     3350
tcp      587
tcp      636


_raw:
Proto   Port
udp    46978
udp       68
udp       68
udp       68
udp    41411
tcp     8889
tcp       22
tcp     3350
tcp    38003
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp    59489
udp    48818
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    57218
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=52017 pid=729442 user=pentester fd=267u ip_version=4 dvc_id=951834 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=47049 pid=729442 user=pentester fd=264u ip_version=4 dvc_id=951797 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=37735 pid=729442 user=pentester fd=263u ip_version=4 dvc_id=951796 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=41096 pid=729442 user=pentester fd=261u ip_version=4 dvc_id=951791 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=34575 pid=729442 user=pentester fd=260u ip_version=4 dvc_id=951792 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=41639 pid=729442 user=pentester fd=259u ip_version=4 dvc_id=951787 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=59975 pid=729442 user=pentester fd=254u ip_version=4 dvc_id=951779 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=48535 pid=729442 user=pentester fd=252u ip_version=4 dvc_id=951780 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=39225 pid=729442 user=pentester fd=250u ip_version=4 dvc_id=951774 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=47176 pid=729442 user=pentester fd=230u ip_version=4 dvc_id=951099 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=53397 pid=729442 user=pentester fd=229u ip_version=4 dvc_id=952898 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=39303 pid=729442 user=pentester fd=228u ip_version=4 dvc_id=950804 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=54181 pid=729442 user=pentester fd=220u ip_version=4 dvc_id=953356 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=34288 pid=729442 user=pentester fd=219u ip_version=4 dvc_id=953355 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=36337 pid=729442 user=pentester fd=218u ip_version=4 dvc_id=953357 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=50319 pid=729442 user=pentester fd=217u ip_version=4 dvc_id=953352 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=38232 pid=729442 user=pentester fd=216u ip_version=4 dvc_id=953349 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=45156 pid=729442 user=pentester fd=212u ip_version=4 dvc_id=950270 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=46800 pid=729442 user=pentester fd=203u ip_version=4 dvc_id=950803 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=34014 pid=729442 user=pentester fd=202u ip_version=4 dvc_id=950258 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=41941 pid=729442 user=pentester fd=201u ip_version=4 dvc_id=950261 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=56953 pid=729442 user=pentester fd=199u ip_version=4 dvc_id=952902 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=59628 pid=729442 user=pentester fd=198u ip_version=4 dvc_id=950252 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=43849 pid=729442 user=pentester fd=197u ip_version=4 dvc_id=950245 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=52847 pid=729442 user=pentester fd=196u ip_version=4 dvc_id=950244 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=33858 pid=729442 user=pentester fd=195u ip_version=4 dvc_id=950243 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=41972 pid=729442 user=pentester fd=193u ip_version=4 dvc_id=950242 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=37238 pid=729442 user=pentester fd=183u ip_version=4 dvc_id=950240 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=53558 pid=729442 user=pentester fd=178u ip_version=4 dvc_id=952547 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=46440 pid=729442 user=pentester fd=171u ip_version=4 dvc_id=951795 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=59134 pid=729442 user=pentester fd=167u ip_version=4 dvc_id=950807 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=38067 pid=729442 user=pentester fd=164u ip_version=4 dvc_id=951900 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=54043 pid=729442 user=pentester fd=163u ip_version=4 dvc_id=954875 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=53711 pid=729442 user=pentester fd=160u ip_version=4 dvc_id=950255 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=38255 pid=729442 user=pentester fd=147u ip_version=4 dvc_id=953365 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=38607 pid=729442 user=pentester fd=130u ip_version=4 dvc_id=954873 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=37827 pid=729442 user=pentester fd=125u ip_version=4 dvc_id=946835 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=40638 pid=729442 user=pentester fd=122u ip_version=4 dvc_id=956390 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=55754 pid=729442 user=pentester fd=121u ip_version=4 dvc_id=950268 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=56667 pid=729442 user=pentester fd=119u ip_version=4 dvc_id=954879 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=34782 pid=729442 user=pentester fd=114u ip_version=4 dvc_id=948498 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=57976 pid=729442 user=pentester fd=113u ip_version=4 dvc_id=946833 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=34854 pid=729442 user=pentester fd=110u ip_version=4 dvc_id=949641 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=50208 pid=729442 user=pentester fd=108u ip_version=4 dvc_id=954876 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=59301 pid=729442 user=pentester fd=95u ip_version=4 dvc_id=954867 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=42216 pid=729442 user=pentester fd=70u ip_version=4 dvc_id=956555 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=49592 pid=729442 user=pentester fd=64u ip_version=4 dvc_id=949777 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=x-www-browser dest_ip=* dest_port=44727 pid=729442 user=pentester fd=52u ip_version=4 dvc_id=946588 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77966 user=xrdp fd=11u ip_version=6 dvc_id=95499 transport=TCP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76692 user=root fd=7u ip_version=6 dvc_id=90588 transport=TCP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76692 user=root fd=6u ip_version=4 dvc_id=90586 transport=TCP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76591 user=root fd=7u ip_version=4 dvc_id=92317 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3493 transport=UDP


_raw: Sat Oct 18 11:49:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=1719 transport=UDP


_raw:
Proto   Port
udp    34951
udp    35029
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    39353
tcp    33733
tcp     3350
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 11:49:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77901 user=xrdp fd=11u ip_version=6 dvc_id=96589 transport=TCP


_raw: Sat Oct 18 11:49:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 11:49:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 11:49:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 11:49:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4147 transport=UDP


_raw: Sat Oct 18 11:49:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=4132 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:49:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77898 user=xrdp fd=11u ip_version=6 dvc_id=96358 transport=TCP


_raw: Sat Oct 18 11:49:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=89751 transport=TCP


_raw: Sat Oct 18 11:49:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=89749 transport=TCP


_raw: Sat Oct 18 11:49:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91447 transport=UDP


_raw: Sat Oct 18 11:49:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 11:49:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=698 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    37351
tcp     3350
tcp       22
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     1883
tcp     5432
tcp     9392
tcp     8889
tcp       80
tcp       22
tcp     6379
tcp     3389
tcp     3350
tcp     6379
tcp     1883
tcp     5432
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     5432
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     8889
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp    45637
tcp      636
tcp     3350
tcp     1433
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp    35939
tcp     3389
tcp     3000


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     8889
tcp       22
tcp     3350
tcp    37181
tcp       22
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     1883
tcp     3350
tcp       22
tcp     5432
tcp     1883
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     9389
tcp       80
tcp       22
tcp      445
tcp     8889
tcp     5432
tcp     6666
tcp     5432
tcp     7474
tcp       22
tcp     7687
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    49528
udp    57836
udp    39089
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    44343


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    43305
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       80
tcp     8889
tcp       22
tcp     5432
tcp     9392
tcp     1883
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     7474
tcp     7687
tcp     8080
tcp    45363
tcp       22
tcp     3389
tcp     3350
tcp     8081


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    57566
udp    37917
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:47:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77922 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Sat Oct 18 11:47:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=7u ip_version=6 dvc_id=90933 transport=TCP


_raw: Sat Oct 18 11:47:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=6u ip_version=4 dvc_id=90931 transport=TCP


_raw: Sat Oct 18 11:47:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76564 user=root fd=7u ip_version=4 dvc_id=92313 transport=UDP


_raw: Sat Oct 18 11:47:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=706 user=root fd=7u ip_version=4 dvc_id=693 transport=UDP


_raw: Sat Oct 18 11:47:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2945 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       53
tcp       22
tcp       22


_raw: Sat Oct 18 11:47:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78003 user=xrdp fd=11u ip_version=6 dvc_id=96479 transport=TCP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=7u ip_version=6 dvc_id=93207 transport=TCP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=6u ip_version=4 dvc_id=93205 transport=TCP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76523 user=root fd=7u ip_version=4 dvc_id=92167 transport=UDP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=1730 transport=UDP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4097 transport=UDP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78230 user=xrdp fd=11u ip_version=6 dvc_id=94586 transport=TCP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76870 user=root fd=7u ip_version=6 dvc_id=91592 transport=TCP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76870 user=root fd=6u ip_version=4 dvc_id=91590 transport=TCP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76769 user=root fd=7u ip_version=4 dvc_id=91531 transport=UDP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 11:47:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:47:33 EDT 2025 app=firefox-esr dest_ip=* dest_port=59420 pid=706827 user=pentester fd=102u ip_version=4 dvc_id=1001104 transport=UDP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77982 user=xrdp fd=11u ip_version=6 dvc_id=93138 transport=TCP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=91432 transport=TCP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=91430 transport=TCP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76508 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4341 transport=UDP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4317 transport=UDP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78262 user=xrdp fd=11u ip_version=6 dvc_id=95790 transport=TCP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=7u ip_version=6 dvc_id=92331 transport=TCP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=6u ip_version=4 dvc_id=92329 transport=TCP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76855 user=root fd=7u ip_version=4 dvc_id=92248 transport=UDP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3597 transport=UDP


_raw: Sat Oct 18 11:47:33 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4296 transport=UDP


_raw:
Proto   Port
udp    59420
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:47:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78485 user=xrdp fd=11u ip_version=6 dvc_id=93858 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=7u ip_version=6 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=6u ip_version=4 dvc_id=89952 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77015 user=root fd=7u ip_version=4 dvc_id=91617 transport=UDP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3040 transport=UDP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=1698 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:47:31 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=728992 user=_gvm fd=4u ip_version=4 dvc_id=875992 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=728987 user=_gvm fd=4u ip_version=4 dvc_id=885762 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=728784 user=mosquitto fd=5u ip_version=4 dvc_id=873749 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=726857 user=postgres fd=7u ip_version=4 dvc_id=865780 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=714924 user=pentester fd=171u ip_version=4 dvc_id=841877 transport=UDP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78373 user=xrdp fd=11u ip_version=6 dvc_id=97483 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=7u ip_version=6 dvc_id=90815 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77134 user=root fd=6u ip_version=4 dvc_id=90813 transport=TCP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77028 user=root fd=7u ip_version=4 dvc_id=91572 transport=UDP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw: Sat Oct 18 11:47:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4395 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     9392
tcp     5432
tcp     1883
tcp       80
tcp     1883
tcp     5432
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     8080
tcp     3350
tcp    33791
tcp     3389


_raw: Sat Oct 18 11:47:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=700657 user=pentester fd=37u ip_version=6 dvc_id=844509 transport=TCP


_raw: Sat Oct 18 11:47:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33791 pid=700657 user=pentester fd=16u ip_version=6 dvc_id=844825 transport=TCP


_raw: Sat Oct 18 11:47:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78150 user=xrdp fd=11u ip_version=6 dvc_id=96510 transport=TCP


_raw: Sat Oct 18 11:47:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76703 user=root fd=7u ip_version=6 dvc_id=88041 transport=TCP


_raw: Sat Oct 18 11:47:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76703 user=root fd=6u ip_version=4 dvc_id=88039 transport=TCP


_raw: Sat Oct 18 11:47:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92402 transport=UDP


_raw: Sat Oct 18 11:47:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=1005 transport=UDP


_raw: Sat Oct 18 11:47:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1632 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    34415
udp    60355
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:47:18 EDT 2025 file_hash=SHA2-256(stdin)= 9925593fcdaf8034fc5f26e788fcbbe2bda9dedc7ad7be5ba834144e8dcb6fe8


_raw: Sat Oct 18 11:47:18 EDT 2025 app=x-www-browser dest_ip=* dest_port=60355 pid=716953 user=pentester fd=70u ip_version=4 dvc_id=888043 transport=UDP


_raw: Sat Oct 18 11:47:18 EDT 2025 app=x-www-browser dest_ip=* dest_port=34415 pid=716953 user=pentester fd=36u ip_version=4 dvc_id=888845 transport=UDP


_raw: Sat Oct 18 11:47:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77809 user=xrdp fd=11u ip_version=6 dvc_id=92795 transport=TCP


_raw: Sat Oct 18 11:47:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76572 user=root fd=7u ip_version=6 dvc_id=89853 transport=TCP


_raw: Sat Oct 18 11:47:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76572 user=root fd=6u ip_version=4 dvc_id=89851 transport=TCP


_raw: Sat Oct 18 11:47:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76467 user=root fd=7u ip_version=4 dvc_id=88854 transport=UDP


_raw: Sat Oct 18 11:47:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3577 transport=UDP


_raw: Sat Oct 18 11:47:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=5124 transport=UDP


_raw: Sat Oct 18 11:47:17 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77752 user=xrdp fd=11u ip_version=6 dvc_id=95601 transport=TCP


_raw: Sat Oct 18 11:47:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=7u ip_version=6 dvc_id=88828 transport=TCP


_raw: Sat Oct 18 11:47:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=6u ip_version=4 dvc_id=88818 transport=TCP


_raw: Sat Oct 18 11:47:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76367 user=root fd=7u ip_version=4 dvc_id=89616 transport=UDP


_raw: Sat Oct 18 11:47:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=717 transport=UDP


_raw: Sat Oct 18 11:47:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=4035 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp       22
tcp     8080
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:47:16 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700460 user=root fd=7u ip_version=4 dvc_id=848461 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=699854 user=root fd=7u ip_version=4 dvc_id=843589 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=699844 user=root fd=7u ip_version=4 dvc_id=845242 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78023 user=xrdp fd=11u ip_version=6 dvc_id=92144 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=7u ip_version=6 dvc_id=90926 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=6u ip_version=4 dvc_id=90924 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76603 user=root fd=7u ip_version=4 dvc_id=92188 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3583 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2675 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=712800 user=pentester fd=222u ip_version=4 dvc_id=847249 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77995 user=xrdp fd=11u ip_version=6 dvc_id=95567 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=7u ip_version=6 dvc_id=91643 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=6u ip_version=4 dvc_id=91641 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76623 user=root fd=7u ip_version=4 dvc_id=89678 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3662 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=580 transport=UDP


_raw:
Proto   Port
udp     5353
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:47:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96393 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=7u ip_version=6 dvc_id=88878 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=6u ip_version=4 dvc_id=88876 transport=TCP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=88833 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=692 user=root fd=7u ip_version=4 dvc_id=560 transport=UDP


_raw: Sat Oct 18 11:47:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=610 user=root fd=7u ip_version=4 dvc_id=2748 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:47:13 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715238 user=pentester fd=37u ip_version=6 dvc_id=845960 transport=TCP


_raw: Sat Oct 18 11:47:13 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38329 pid=715238 user=pentester fd=16u ip_version=6 dvc_id=845191 transport=TCP


_raw: Sat Oct 18 11:47:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77957 user=xrdp fd=11u ip_version=6 dvc_id=94678 transport=TCP


_raw: Sat Oct 18 11:47:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=7u ip_version=6 dvc_id=93212 transport=TCP


_raw: Sat Oct 18 11:47:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=6u ip_version=4 dvc_id=93210 transport=TCP


_raw: Sat Oct 18 11:47:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76597 user=root fd=7u ip_version=4 dvc_id=90691 transport=UDP


_raw: Sat Oct 18 11:47:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3591 transport=UDP


_raw: Sat Oct 18 11:47:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1780 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp    38329
tcp     3350
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:47:03 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=9392 pid=703709 user=root fd=4u ip_version=4 dvc_id=874097 transport=TCP


_raw: Sat Oct 18 11:47:03 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=40419 pid=699779 user=root fd=7u ip_version=4 dvc_id=858870 transport=TCP


_raw: Sat Oct 18 11:47:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=95039 transport=TCP


_raw: Sat Oct 18 11:47:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=91797 transport=TCP


_raw: Sat Oct 18 11:47:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=91795 transport=TCP


_raw: Sat Oct 18 11:47:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90585 transport=UDP


_raw: Sat Oct 18 11:47:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4009 transport=UDP


_raw: Sat Oct 18 11:47:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4226 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:47:02 EDT 2025 app=firefox-esr dest_ip=* dest_port=51926 pid=702772 user=pentester fd=65u ip_version=4 dvc_id=875675 transport=UDP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=firefox-esr dest_ip=* dest_port=37386 pid=702772 user=pentester fd=64u ip_version=4 dvc_id=873752 transport=UDP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78081 user=xrdp fd=11u ip_version=6 dvc_id=96343 transport=TCP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=7u ip_version=6 dvc_id=91583 transport=TCP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76796 user=root fd=6u ip_version=4 dvc_id=91581 transport=TCP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76664 user=root fd=7u ip_version=4 dvc_id=91511 transport=UDP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4287 transport=UDP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=1860 transport=UDP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77944 user=xrdp fd=11u ip_version=6 dvc_id=93050 transport=TCP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76644 user=root fd=7u ip_version=6 dvc_id=91534 transport=TCP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76644 user=root fd=6u ip_version=4 dvc_id=91532 transport=TCP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76543 user=root fd=7u ip_version=4 dvc_id=92212 transport=UDP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2685 transport=UDP


_raw: Sat Oct 18 11:47:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    51926
udp       68
udp       68
udp       68
udp    37386
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:47:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77794 user=xrdp fd=11u ip_version=6 dvc_id=92156 transport=TCP


_raw: Sat Oct 18 11:47:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 11:47:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 11:47:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76404 user=root fd=7u ip_version=4 dvc_id=89912 transport=UDP


_raw: Sat Oct 18 11:47:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=905 transport=UDP


_raw: Sat Oct 18 11:47:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4175 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:46:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77970 user=xrdp fd=11u ip_version=6 dvc_id=94557 transport=TCP


_raw: Sat Oct 18 11:46:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 11:46:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 11:46:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=90619 transport=UDP


_raw: Sat Oct 18 11:46:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 11:46:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 11:46:56 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78045 user=xrdp fd=11u ip_version=6 dvc_id=95486 transport=TCP


_raw: Sat Oct 18 11:46:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=7u ip_version=6 dvc_id=91616 transport=TCP


_raw: Sat Oct 18 11:46:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=6u ip_version=4 dvc_id=91614 transport=TCP


_raw: Sat Oct 18 11:46:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76670 user=root fd=7u ip_version=4 dvc_id=91533 transport=UDP


_raw: Sat Oct 18 11:46:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw: Sat Oct 18 11:46:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 11:46:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=49533 pid=705621 user=pentester fd=233u ip_version=4 dvc_id=892627 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=45323 pid=705621 user=pentester fd=231u ip_version=4 dvc_id=892623 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=38626 pid=705621 user=pentester fd=225u ip_version=4 dvc_id=892622 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=48022 pid=705621 user=pentester fd=213u ip_version=4 dvc_id=891781 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=35957 pid=705621 user=pentester fd=191u ip_version=4 dvc_id=893549 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=33772 pid=705621 user=pentester fd=183u ip_version=4 dvc_id=893544 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=39856 pid=705621 user=pentester fd=159u ip_version=4 dvc_id=894281 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78093 user=xrdp fd=11u ip_version=6 dvc_id=94642 transport=TCP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=7u ip_version=6 dvc_id=92378 transport=TCP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=6u ip_version=4 dvc_id=92376 transport=TCP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76689 user=root fd=7u ip_version=4 dvc_id=90574 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1561 transport=UDP


_raw: Sat Oct 18 11:46:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3965 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:46:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78042 user=xrdp fd=11u ip_version=6 dvc_id=93000 transport=TCP


_raw: Sat Oct 18 11:46:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=7u ip_version=6 dvc_id=91353 transport=TCP