_raw: Sat Oct 18 11:24:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76526 user=root fd=7u ip_version=4 dvc_id=90690 transport=UDP


_raw: Sat Oct 18 11:24:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4258 transport=UDP


_raw: Sat Oct 18 11:24:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726263 user=pentester fd=37u ip_version=6 dvc_id=967490 transport=TCP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38003 pid=726263 user=pentester fd=16u ip_version=6 dvc_id=965488 transport=TCP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=firefox-esr dest_ip=* dest_port=39223 pid=723862 user=pentester fd=172u ip_version=4 dvc_id=991899 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=firefox-esr dest_ip=* dest_port=46192 pid=723862 user=pentester fd=160u ip_version=4 dvc_id=989718 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=firefox-esr dest_ip=* dest_port=40695 pid=723862 user=pentester fd=158u ip_version=4 dvc_id=989009 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=firefox-esr dest_ip=* dest_port=45598 pid=723862 user=pentester fd=150u ip_version=4 dvc_id=989007 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=firefox-esr dest_ip=* dest_port=37636 pid=723862 user=pentester fd=138u ip_version=4 dvc_id=991346 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77878 user=xrdp fd=11u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=7u ip_version=6 dvc_id=89945 transport=TCP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=6u ip_version=4 dvc_id=89943 transport=TCP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76488 user=root fd=7u ip_version=4 dvc_id=90481 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4267 transport=UDP


_raw: Sat Oct 18 11:24:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1011 transport=UDP


_raw: Sat Oct 18 11:24:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77857 user=xrdp fd=11u ip_version=6 dvc_id=95552 transport=TCP


_raw: Sat Oct 18 11:24:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=7u ip_version=6 dvc_id=91239 transport=TCP


_raw: Sat Oct 18 11:24:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76583 user=root fd=6u ip_version=4 dvc_id=91237 transport=TCP


_raw: Sat Oct 18 11:24:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76482 user=root fd=7u ip_version=4 dvc_id=91145 transport=UDP


_raw: Sat Oct 18 11:24:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=1744 transport=UDP


_raw: Sat Oct 18 11:24:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=625 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:24:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78065 user=xrdp fd=11u ip_version=6 dvc_id=93056 transport=TCP


_raw: Sat Oct 18 11:24:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=91036 transport=TCP


_raw: Sat Oct 18 11:24:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=91034 transport=TCP


_raw: Sat Oct 18 11:24:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76664 user=root fd=7u ip_version=4 dvc_id=90961 transport=UDP


_raw: Sat Oct 18 11:24:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4102 transport=UDP


_raw: Sat Oct 18 11:24:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=537 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw: Sat Oct 18 11:24:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=706370 user=pentester fd=37u ip_version=6 dvc_id=857600 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38179 pid=706370 user=pentester fd=16u ip_version=6 dvc_id=856926 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=443 pid=702850 user=root fd=7u ip_version=4 dvc_id=840515 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=docker-proxy dest_ip=* dest_port=80 pid=702843 user=root fd=7u ip_version=4 dvc_id=840502 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=updog dest_ip=* dest_port=9090 pid=697244 user=pentester fd=3u ip_version=4 dvc_id=812253 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77979 user=xrdp fd=11u ip_version=6 dvc_id=95549 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76654 user=root fd=7u ip_version=6 dvc_id=91537 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76654 user=root fd=6u ip_version=4 dvc_id=91527 transport=TCP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76553 user=root fd=7u ip_version=4 dvc_id=91009 transport=UDP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=707 user=root fd=7u ip_version=4 dvc_id=942 transport=UDP


_raw: Sat Oct 18 11:24:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=1660 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     9090
tcp      443
tcp       22
tcp       80
tcp     3350
tcp    38179
tcp       22
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 11:24:14 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78348 user=xrdp fd=11u ip_version=6 dvc_id=96419 transport=TCP


_raw: Sat Oct 18 11:24:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=7u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 11:24:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=6u ip_version=4 dvc_id=91955 transport=TCP


_raw: Sat Oct 18 11:24:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76947 user=root fd=7u ip_version=4 dvc_id=91911 transport=UDP


_raw: Sat Oct 18 11:24:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=694 user=root fd=7u ip_version=4 dvc_id=810 transport=UDP


_raw: Sat Oct 18 11:24:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=611 user=root fd=7u ip_version=4 dvc_id=3584 transport=UDP


_raw: Sat Oct 18 11:24:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77947 user=xrdp fd=11u ip_version=6 dvc_id=94178 transport=TCP


_raw: Sat Oct 18 11:24:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76690 user=root fd=7u ip_version=6 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 11:24:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76690 user=root fd=6u ip_version=4 dvc_id=90739 transport=TCP


_raw: Sat Oct 18 11:24:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76589 user=root fd=7u ip_version=4 dvc_id=91798 transport=UDP


_raw: Sat Oct 18 11:24:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2590 transport=UDP


_raw: Sat Oct 18 11:24:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=461 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:24:12 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77818 user=xrdp fd=11u ip_version=6 dvc_id=95506 transport=TCP


_raw: Sat Oct 18 11:24:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=7u ip_version=6 dvc_id=92220 transport=TCP


_raw: Sat Oct 18 11:24:12 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=6u ip_version=4 dvc_id=92218 transport=TCP


_raw: Sat Oct 18 11:24:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76434 user=root fd=7u ip_version=4 dvc_id=91175 transport=UDP


_raw: Sat Oct 18 11:24:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3619 transport=UDP


_raw: Sat Oct 18 11:24:12 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=492 transport=UDP


_raw: Sat Oct 18 11:24:10 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78003 user=xrdp fd=11u ip_version=6 dvc_id=96479 transport=TCP


_raw: Sat Oct 18 11:24:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=7u ip_version=6 dvc_id=93207 transport=TCP


_raw: Sat Oct 18 11:24:10 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=6u ip_version=4 dvc_id=93205 transport=TCP


_raw: Sat Oct 18 11:24:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76523 user=root fd=7u ip_version=4 dvc_id=92167 transport=UDP


_raw: Sat Oct 18 11:24:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=1730 transport=UDP


_raw: Sat Oct 18 11:24:10 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4097 transport=UDP


_raw: Sat Oct 18 11:24:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96478 transport=TCP


_raw: Sat Oct 18 11:24:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=7u ip_version=6 dvc_id=92354 transport=TCP


_raw: Sat Oct 18 11:24:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=6u ip_version=4 dvc_id=92352 transport=TCP


_raw: Sat Oct 18 11:24:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76679 user=root fd=7u ip_version=4 dvc_id=90433 transport=UDP


_raw: Sat Oct 18 11:24:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4163 transport=UDP


_raw: Sat Oct 18 11:24:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=820 transport=UDP


_raw: Sat Oct 18 11:24:08 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77982 user=xrdp fd=11u ip_version=6 dvc_id=93138 transport=TCP


_raw: Sat Oct 18 11:24:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=91432 transport=TCP


_raw: Sat Oct 18 11:24:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=91430 transport=TCP


_raw: Sat Oct 18 11:24:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76508 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 11:24:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4341 transport=UDP


_raw: Sat Oct 18 11:24:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4317 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:24:07 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78230 user=xrdp fd=11u ip_version=6 dvc_id=94586 transport=TCP


_raw: Sat Oct 18 11:24:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76870 user=root fd=7u ip_version=6 dvc_id=91592 transport=TCP


_raw: Sat Oct 18 11:24:07 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76870 user=root fd=6u ip_version=4 dvc_id=91590 transport=TCP


_raw: Sat Oct 18 11:24:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76769 user=root fd=7u ip_version=4 dvc_id=91531 transport=UDP


_raw: Sat Oct 18 11:24:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 11:24:07 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=567 transport=UDP


_raw: Sat Oct 18 11:24:01 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=694911 user=pentester fd=217u ip_version=4 dvc_id=829224 transport=UDP


_raw: Sat Oct 18 11:24:01 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78014 user=xrdp fd=11u ip_version=6 dvc_id=95181 transport=TCP


_raw: Sat Oct 18 11:24:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=7u ip_version=6 dvc_id=89671 transport=TCP


_raw: Sat Oct 18 11:24:01 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76641 user=root fd=6u ip_version=4 dvc_id=89661 transport=TCP


_raw: Sat Oct 18 11:24:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76524 user=root fd=7u ip_version=4 dvc_id=90882 transport=UDP


_raw: Sat Oct 18 11:24:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=475 transport=UDP


_raw: Sat Oct 18 11:24:01 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4213 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 11:23:57 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715926 user=pentester fd=37u ip_version=6 dvc_id=854060 transport=TCP


_raw: Sat Oct 18 11:23:57 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45661 pid=715926 user=pentester fd=16u ip_version=6 dvc_id=854051 transport=TCP


_raw: Sat Oct 18 11:23:57 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77938 user=xrdp fd=11u ip_version=6 dvc_id=96351 transport=TCP


_raw: Sat Oct 18 11:23:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=7u ip_version=6 dvc_id=91458 transport=TCP


_raw: Sat Oct 18 11:23:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=6u ip_version=4 dvc_id=91456 transport=TCP


_raw: Sat Oct 18 11:23:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76582 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 11:23:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=3573 transport=UDP


_raw: Sat Oct 18 11:23:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=5146 transport=UDP


_raw: Sat Oct 18 11:23:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93110 transport=TCP


_raw: Sat Oct 18 11:23:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=90711 transport=TCP


_raw: Sat Oct 18 11:23:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=90709 transport=TCP


_raw: Sat Oct 18 11:23:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76558 user=root fd=7u ip_version=4 dvc_id=91467 transport=UDP


_raw: Sat Oct 18 11:23:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=3853 transport=UDP


_raw: Sat Oct 18 11:23:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=46512 pid=716953 user=pentester fd=290u ip_version=4 dvc_id=851663 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=60903 pid=716953 user=pentester fd=286u ip_version=4 dvc_id=853349 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=46120 pid=716953 user=pentester fd=284u ip_version=4 dvc_id=853351 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=43491 pid=716953 user=pentester fd=274u ip_version=4 dvc_id=849633 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=35690 pid=716953 user=pentester fd=272u ip_version=4 dvc_id=849631 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=41216 pid=716953 user=pentester fd=259u ip_version=4 dvc_id=852274 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=60003 pid=716953 user=pentester fd=253u ip_version=4 dvc_id=852263 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=53906 pid=716953 user=pentester fd=198u ip_version=4 dvc_id=849630 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=60723 pid=716953 user=pentester fd=192u ip_version=4 dvc_id=852297 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=48683 pid=716953 user=pentester fd=130u ip_version=4 dvc_id=848659 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=51957 pid=716953 user=pentester fd=125u ip_version=4 dvc_id=852802 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=59860 pid=716953 user=pentester fd=123u ip_version=4 dvc_id=851898 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=55833 pid=716953 user=pentester fd=122u ip_version=4 dvc_id=852451 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=45340 pid=716953 user=pentester fd=121u ip_version=4 dvc_id=852452 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=37071 pid=716953 user=pentester fd=120u ip_version=4 dvc_id=852450 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=33425 pid=716953 user=pentester fd=118u ip_version=4 dvc_id=851883 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=34113 pid=716953 user=pentester fd=116u ip_version=4 dvc_id=851882 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=40984 pid=716953 user=pentester fd=114u ip_version=4 dvc_id=850311 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=43235 pid=716953 user=pentester fd=113u ip_version=4 dvc_id=848482 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=46976 pid=716953 user=pentester fd=111u ip_version=4 dvc_id=848475 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=44435 pid=716953 user=pentester fd=106u ip_version=4 dvc_id=851879 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=34437 pid=716953 user=pentester fd=70u ip_version=4 dvc_id=853510 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=51988 pid=716953 user=pentester fd=69u ip_version=4 dvc_id=853373 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=x-www-browser dest_ip=* dest_port=58120 pid=716953 user=pentester fd=64u ip_version=4 dvc_id=853392 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77809 user=xrdp fd=11u ip_version=6 dvc_id=92795 transport=TCP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76572 user=root fd=7u ip_version=6 dvc_id=89853 transport=TCP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76572 user=root fd=6u ip_version=4 dvc_id=89851 transport=TCP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76467 user=root fd=7u ip_version=4 dvc_id=88854 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3577 transport=UDP


_raw: Sat Oct 18 11:23:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=5124 transport=UDP


_raw: Sat Oct 18 11:23:50 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96393 transport=TCP


_raw: Sat Oct 18 11:23:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=7u ip_version=6 dvc_id=88878 transport=TCP


_raw: Sat Oct 18 11:23:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=6u ip_version=4 dvc_id=88876 transport=TCP


_raw: Sat Oct 18 11:23:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=88833 transport=UDP


_raw: Sat Oct 18 11:23:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=692 user=root fd=7u ip_version=4 dvc_id=560 transport=UDP


_raw: Sat Oct 18 11:23:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=610 user=root fd=7u ip_version=4 dvc_id=2748 transport=UDP


_raw: Sat Oct 18 11:23:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94054 transport=TCP


_raw: Sat Oct 18 11:23:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=7u ip_version=6 dvc_id=88024 transport=TCP


_raw: Sat Oct 18 11:23:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76642 user=root fd=6u ip_version=4 dvc_id=88014 transport=TCP


_raw: Sat Oct 18 11:23:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76540 user=root fd=7u ip_version=4 dvc_id=89082 transport=UDP


_raw: Sat Oct 18 11:23:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=479 transport=UDP


_raw: Sat Oct 18 11:23:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4293 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:23:47 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77910 user=xrdp fd=11u ip_version=6 dvc_id=94680 transport=TCP


_raw: Sat Oct 18 11:23:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=7u ip_version=6 dvc_id=92245 transport=TCP


_raw: Sat Oct 18 11:23:47 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76671 user=root fd=6u ip_version=4 dvc_id=92243 transport=TCP


_raw: Sat Oct 18 11:23:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=92206 transport=UDP


_raw: Sat Oct 18 11:23:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4269 transport=UDP


_raw: Sat Oct 18 11:23:47 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=625 user=root fd=7u ip_version=4 dvc_id=2801 transport=UDP


_raw: Sat Oct 18 11:23:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78212 user=xrdp fd=11u ip_version=6 dvc_id=92976 transport=TCP


_raw: Sat Oct 18 11:23:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=7u ip_version=6 dvc_id=91320 transport=TCP


_raw: Sat Oct 18 11:23:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=6u ip_version=4 dvc_id=91310 transport=TCP


_raw: Sat Oct 18 11:23:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76852 user=root fd=7u ip_version=4 dvc_id=90020 transport=UDP


_raw: Sat Oct 18 11:23:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=934 transport=UDP


_raw: Sat Oct 18 11:23:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=913 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:23:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77974 user=xrdp fd=11u ip_version=6 dvc_id=93705 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=92193 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=92191 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=89070 transport=UDP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4280 transport=UDP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3762 transport=UDP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78248 user=xrdp fd=11u ip_version=6 dvc_id=95164 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=7u ip_version=6 dvc_id=91547 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76948 user=root fd=6u ip_version=4 dvc_id=91545 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76847 user=root fd=7u ip_version=4 dvc_id=91483 transport=UDP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2893 transport=UDP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=3938 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:23:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77752 user=xrdp fd=11u ip_version=6 dvc_id=95601 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=7u ip_version=6 dvc_id=88828 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=6u ip_version=4 dvc_id=88818 transport=TCP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76367 user=root fd=7u ip_version=4 dvc_id=89616 transport=UDP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=717 transport=UDP


_raw: Sat Oct 18 11:23:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=4035 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:23:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=35306 pid=720912 user=pentester fd=164u ip_version=4 dvc_id=882950 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=47066 pid=720912 user=pentester fd=160u ip_version=4 dvc_id=881401 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=53576 pid=720912 user=pentester fd=156u ip_version=4 dvc_id=882843 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=36972 pid=720912 user=pentester fd=154u ip_version=4 dvc_id=881904 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=39643 pid=720912 user=pentester fd=150u ip_version=4 dvc_id=883863 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=41238 pid=720912 user=pentester fd=77u ip_version=4 dvc_id=878507 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=43612 pid=720912 user=pentester fd=70u ip_version=4 dvc_id=881902 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=715682 user=postgres fd=7u ip_version=4 dvc_id=838335 transport=TCP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=715667 user=mosquitto fd=5u ip_version=4 dvc_id=836029 transport=TCP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78006 user=xrdp fd=11u ip_version=6 dvc_id=94671 transport=TCP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=7u ip_version=6 dvc_id=91660 transport=TCP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=6u ip_version=4 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76666 user=root fd=7u ip_version=4 dvc_id=92296 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=2635 transport=UDP


_raw: Sat Oct 18 11:23:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2620 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       53
tcp       22
tcp       22


_raw: Sat Oct 18 11:23:20 EDT 2025 app=x-www-browser dest_ip=* dest_port=46079 pid=715484 user=pentester fd=52u ip_version=4 dvc_id=851931 transport=UDP


_raw: Sat Oct 18 11:23:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77868 user=xrdp fd=11u ip_version=6 dvc_id=93133 transport=TCP


_raw: Sat Oct 18 11:23:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=7u ip_version=6 dvc_id=90603 transport=TCP


_raw: Sat Oct 18 11:23:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76629 user=root fd=6u ip_version=4 dvc_id=90593 transport=TCP


_raw: Sat Oct 18 11:23:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76527 user=root fd=7u ip_version=4 dvc_id=89849 transport=UDP


_raw: Sat Oct 18 11:23:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4190 transport=UDP


_raw: Sat Oct 18 11:23:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3609 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    46079
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:23:16 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78042 user=xrdp fd=11u ip_version=6 dvc_id=93000 transport=TCP


_raw: Sat Oct 18 11:23:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=7u ip_version=6 dvc_id=91353 transport=TCP


_raw: Sat Oct 18 11:23:16 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=6u ip_version=4 dvc_id=91351 transport=TCP


_raw: Sat Oct 18 11:23:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76608 user=root fd=7u ip_version=4 dvc_id=89771 transport=UDP


_raw: Sat Oct 18 11:23:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 11:23:16 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4228 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:23:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95733 transport=TCP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=7u ip_version=6 dvc_id=90801 transport=TCP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=6u ip_version=4 dvc_id=90799 transport=TCP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76534 user=root fd=7u ip_version=4 dvc_id=90719 transport=UDP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=5139 transport=UDP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=3054 transport=UDP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78248 user=xrdp fd=11u ip_version=6 dvc_id=97325 transport=TCP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77010 user=root fd=7u ip_version=6 dvc_id=92274 transport=TCP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77010 user=root fd=6u ip_version=4 dvc_id=92264 transport=TCP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76909 user=root fd=7u ip_version=4 dvc_id=89894 transport=UDP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=2570 transport=UDP


_raw: Sat Oct 18 11:23:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=1642 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
tcp       22
tcp    39763
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:23:08 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77922 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Sat Oct 18 11:23:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=7u ip_version=6 dvc_id=90933 transport=TCP


_raw: Sat Oct 18 11:23:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=6u ip_version=4 dvc_id=90931 transport=TCP


_raw: Sat Oct 18 11:23:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76564 user=root fd=7u ip_version=4 dvc_id=92313 transport=UDP


_raw: Sat Oct 18 11:23:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=706 user=root fd=7u ip_version=4 dvc_id=693 transport=UDP


_raw: Sat Oct 18 11:23:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2945 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:22:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77884 user=xrdp fd=11u ip_version=6 dvc_id=96345 transport=TCP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=7u ip_version=6 dvc_id=88988 transport=TCP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76626 user=root fd=6u ip_version=4 dvc_id=88978 transport=TCP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76525 user=root fd=7u ip_version=4 dvc_id=89807 transport=UDP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=488 transport=UDP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=1608 transport=UDP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78242 user=xrdp fd=11u ip_version=6 dvc_id=95969 transport=TCP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=7u ip_version=6 dvc_id=90108 transport=TCP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=6u ip_version=4 dvc_id=90098 transport=TCP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76812 user=root fd=7u ip_version=4 dvc_id=91280 transport=UDP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3707 transport=UDP


_raw: Sat Oct 18 11:22:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3681 transport=UDP


_raw:
Proto   Port
udp    33529
udp    38394
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:22:58 EDT 2025 app=firefox-esr dest_ip=* dest_port=33529 pid=698126 user=pentester fd=108u ip_version=4 dvc_id=867397 transport=UDP


_raw: Sat Oct 18 11:22:58 EDT 2025 app=firefox-esr dest_ip=* dest_port=38394 pid=698126 user=pentester fd=52u ip_version=4 dvc_id=867186 transport=UDP


_raw: Sat Oct 18 11:22:58 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77946 user=xrdp fd=11u ip_version=6 dvc_id=93897 transport=TCP


_raw: Sat Oct 18 11:22:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=7u ip_version=6 dvc_id=89034 transport=TCP


_raw: Sat Oct 18 11:22:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=6u ip_version=4 dvc_id=89032 transport=TCP


_raw: Sat Oct 18 11:22:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=91451 transport=UDP


_raw: Sat Oct 18 11:22:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4350 transport=UDP


_raw: Sat Oct 18 11:22:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1804 transport=UDP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=3004 pid=735347 user=root fd=7u ip_version=4 dvc_id=1012142 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=732634 user=root fd=7u ip_version=4 dvc_id=1001767 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=732626 user=root fd=7u ip_version=4 dvc_id=1003530 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=3003 pid=730336 user=root fd=7u ip_version=6 dvc_id=994841 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=3003 pid=730329 user=root fd=7u ip_version=4 dvc_id=994840 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=3001 pid=728299 user=root fd=7u ip_version=6 dvc_id=990222 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=3001 pid=728294 user=root fd=7u ip_version=4 dvc_id=990221 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=728188 user=root fd=7u ip_version=6 dvc_id=987103 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=728182 user=root fd=7u ip_version=4 dvc_id=987102 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=728097 user=root fd=7u ip_version=6 dvc_id=987446 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=728090 user=root fd=7u ip_version=4 dvc_id=987445 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728081 user=root fd=7u ip_version=6 dvc_id=987419 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=728075 user=root fd=7u ip_version=4 dvc_id=987418 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727790 user=root fd=7u ip_version=6 dvc_id=986002 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=727783 user=root fd=7u ip_version=4 dvc_id=986001 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717116 user=root fd=7u ip_version=6 dvc_id=944991 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=docker-proxy dest_ip=* dest_port=3002 pid=717109 user=root fd=7u ip_version=4 dvc_id=944990 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=x-www-browser dest_ip=* dest_port=45325 pid=714541 user=pentester fd=108u ip_version=4 dvc_id=2006342 transport=UDP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=x-www-browser dest_ip=* dest_port=47248 pid=714541 user=pentester fd=71u ip_version=4 dvc_id=2000529 transport=UDP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=x-www-browser dest_ip=* dest_port=39095 pid=714541 user=pentester fd=66u ip_version=4 dvc_id=1999740 transport=UDP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78080 user=xrdp fd=11u ip_version=6 dvc_id=96453 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=7u ip_version=6 dvc_id=91396 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76748 user=root fd=6u ip_version=4 dvc_id=91394 transport=TCP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76647 user=root fd=7u ip_version=4 dvc_id=88050 transport=UDP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=996 transport=UDP


_raw: Sat Oct 18 11:22:56 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2751 transport=UDP


_raw: Sat Oct 18 11:22:51 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77995 user=xrdp fd=11u ip_version=6 dvc_id=95567 transport=TCP


_raw: Sat Oct 18 11:22:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=7u ip_version=6 dvc_id=91643 transport=TCP


_raw: Sat Oct 18 11:22:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76723 user=root fd=6u ip_version=4 dvc_id=91641 transport=TCP


_raw: Sat Oct 18 11:22:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76623 user=root fd=7u ip_version=4 dvc_id=89678 transport=UDP


_raw: Sat Oct 18 11:22:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3662 transport=UDP


_raw: Sat Oct 18 11:22:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=580 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     7474
tcp     7687
tcp       22
tcp     8080
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:22:50 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77943 user=xrdp fd=11u ip_version=6 dvc_id=94970 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=7u ip_version=6 dvc_id=89964 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76686 user=root fd=6u ip_version=4 dvc_id=89962 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=92185 transport=UDP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2521 transport=UDP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3717 transport=UDP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700460 user=root fd=7u ip_version=4 dvc_id=848461 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=699854 user=root fd=7u ip_version=4 dvc_id=843589 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=699844 user=root fd=7u ip_version=4 dvc_id=845242 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78023 user=xrdp fd=11u ip_version=6 dvc_id=92144 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=7u ip_version=6 dvc_id=90926 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=6u ip_version=4 dvc_id=90924 transport=TCP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76603 user=root fd=7u ip_version=4 dvc_id=92188 transport=UDP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3583 transport=UDP


_raw: Sat Oct 18 11:22:50 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2675 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:22:46 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=716015 user=postgres fd=7u ip_version=4 dvc_id=838228 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=716001 user=mosquitto fd=5u ip_version=4 dvc_id=840739 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78005 user=xrdp fd=11u ip_version=6 dvc_id=96314 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76750 user=root fd=7u ip_version=6 dvc_id=92238 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76750 user=root fd=6u ip_version=4 dvc_id=92236 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=88061 transport=UDP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2969 transport=UDP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3787 transport=UDP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77883 user=xrdp fd=11u ip_version=6 dvc_id=94500 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76569 user=root fd=7u ip_version=6 dvc_id=90505 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76569 user=root fd=6u ip_version=4 dvc_id=90503 transport=TCP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76469 user=root fd=7u ip_version=4 dvc_id=90452 transport=UDP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2585 transport=UDP


_raw: Sat Oct 18 11:22:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3992 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:22:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77957 user=xrdp fd=11u ip_version=6 dvc_id=94678 transport=TCP


_raw: Sat Oct 18 11:22:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=7u ip_version=6 dvc_id=93212 transport=TCP


_raw: Sat Oct 18 11:22:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=6u ip_version=4 dvc_id=93210 transport=TCP


_raw: Sat Oct 18 11:22:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76597 user=root fd=7u ip_version=4 dvc_id=90691 transport=UDP


_raw: Sat Oct 18 11:22:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3591 transport=UDP


_raw: Sat Oct 18 11:22:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1780 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     1883
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw: Sat Oct 18 11:22:44 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78201 user=xrdp fd=11u ip_version=6 dvc_id=96489 transport=TCP


_raw: Sat Oct 18 11:22:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=7u ip_version=6 dvc_id=90905 transport=TCP


_raw: Sat Oct 18 11:22:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=6u ip_version=4 dvc_id=90903 transport=TCP


_raw: Sat Oct 18 11:22:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76842 user=root fd=7u ip_version=4 dvc_id=92211 transport=UDP


_raw: Sat Oct 18 11:22:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3919 transport=UDP


_raw: Sat Oct 18 11:22:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3904 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:22:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78058 user=xrdp fd=11u ip_version=6 dvc_id=95114 transport=TCP


_raw: Sat Oct 18 11:22:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=92229 transport=TCP


_raw: Sat Oct 18 11:22:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 11:22:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=92166 transport=UDP


_raw: Sat Oct 18 11:22:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw: Sat Oct 18 11:22:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=579 transport=UDP


_raw:
Proto   Port
udp    55572
udp       68
udp       68
udp       68
udp    50270
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:22:41 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8081 pid=715265 user=pentester fd=37u ip_version=6 dvc_id=889430 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45363 pid=715265 user=pentester fd=16u ip_version=6 dvc_id=886615 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700806 user=root fd=7u ip_version=4 dvc_id=837927 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=700188 user=root fd=7u ip_version=4 dvc_id=836249 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=700182 user=root fd=7u ip_version=4 dvc_id=834393 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78276 user=xrdp fd=11u ip_version=6 dvc_id=95575 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76927 user=root fd=7u ip_version=6 dvc_id=90743 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76927 user=root fd=6u ip_version=4 dvc_id=90741 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76811 user=root fd=7u ip_version=4 dvc_id=92347 transport=UDP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3599 transport=UDP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=587 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     7474
tcp     7687
tcp     8080
tcp    45363
tcp       22
tcp     3389
tcp     3350
tcp     8081


_raw: Sat Oct 18 11:22:41 EDT 2025 app=x-www-browser dest_ip=* dest_port=60714 pid=698123 user=pentester fd=112u ip_version=4 dvc_id=872608 transport=UDP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=x-www-browser dest_ip=* dest_port=43435 pid=698123 user=pentester fd=82u ip_version=4 dvc_id=871793 transport=UDP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77971 user=xrdp fd=11u ip_version=6 dvc_id=93019 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=92278 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=92276 transport=TCP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76585 user=root fd=7u ip_version=4 dvc_id=88762 transport=UDP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3862 transport=UDP


_raw: Sat Oct 18 11:22:41 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3848 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp    33733
tcp     3350
tcp     3389
tcp       22
tcp     8080


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:22:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78107 user=xrdp fd=11u ip_version=6 dvc_id=94813 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=7u ip_version=6 dvc_id=92237 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76807 user=root fd=6u ip_version=4 dvc_id=92227 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76706 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3580 transport=UDP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=721701 user=pentester fd=37u ip_version=6 dvc_id=859538 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=33733 pid=721701 user=pentester fd=16u ip_version=6 dvc_id=860698 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77926 user=xrdp fd=11u ip_version=6 dvc_id=95531 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90892 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90890 transport=TCP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=92282 transport=UDP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=2805 transport=UDP


_raw: Sat Oct 18 11:22:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2790 transport=UDP


_raw: Sat Oct 18 11:22:35 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77794 user=xrdp fd=11u ip_version=6 dvc_id=92156 transport=TCP


_raw: Sat Oct 18 11:22:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 11:22:35 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 11:22:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76404 user=root fd=7u ip_version=4 dvc_id=89912 transport=UDP


_raw: Sat Oct 18 11:22:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=905 transport=UDP


_raw: Sat Oct 18 11:22:35 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4175 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:22:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77925 user=xrdp fd=11u ip_version=6 dvc_id=93793 transport=TCP


_raw: Sat Oct 18 11:22:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=7u ip_version=6 dvc_id=90586 transport=TCP


_raw: Sat Oct 18 11:22:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=6u ip_version=4 dvc_id=90584 transport=TCP


_raw: Sat Oct 18 11:22:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76479 user=root fd=7u ip_version=4 dvc_id=90009 transport=UDP


_raw: Sat Oct 18 11:22:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2849 transport=UDP


_raw: Sat Oct 18 11:22:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:22:25 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77918 user=xrdp fd=11u ip_version=6 dvc_id=96359 transport=TCP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=7u ip_version=6 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=6u ip_version=4 dvc_id=90617 transport=TCP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76562 user=root fd=7u ip_version=4 dvc_id=91321 transport=UDP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=711 transport=UDP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1626 transport=UDP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77898 user=xrdp fd=11u ip_version=6 dvc_id=96358 transport=TCP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=89751 transport=TCP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=89749 transport=TCP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76542 user=root fd=7u ip_version=4 dvc_id=91447 transport=UDP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 11:22:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=698 transport=UDP


_raw: Sat Oct 18 11:22:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78253 user=xrdp fd=11u ip_version=6 dvc_id=94909 transport=TCP


_raw: Sat Oct 18 11:22:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=7u ip_version=6 dvc_id=89930 transport=TCP


_raw: Sat Oct 18 11:22:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=6u ip_version=4 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 11:22:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76890 user=root fd=7u ip_version=4 dvc_id=89862 transport=UDP


_raw: Sat Oct 18 11:22:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3570 transport=UDP


_raw: Sat Oct 18 11:22:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=3067 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:22:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78093 user=xrdp fd=11u ip_version=6 dvc_id=94642 transport=TCP


_raw: Sat Oct 18 11:22:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=7u ip_version=6 dvc_id=92378 transport=TCP


_raw: Sat Oct 18 11:22:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76790 user=root fd=6u ip_version=4 dvc_id=92376 transport=TCP


_raw: Sat Oct 18 11:22:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76689 user=root fd=7u ip_version=4 dvc_id=90574 transport=UDP


_raw: Sat Oct 18 11:22:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1561 transport=UDP


_raw: Sat Oct 18 11:22:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3965 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:22:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=50646 pid=694313 user=pentester fd=222u ip_version=4 dvc_id=1562637 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=45340 pid=694313 user=pentester fd=219u ip_version=4 dvc_id=1562638 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=51159 pid=694313 user=pentester fd=196u ip_version=4 dvc_id=1561327 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=53886 pid=694313 user=pentester fd=194u ip_version=4 dvc_id=1559233 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=44409 pid=694313 user=pentester fd=187u ip_version=4 dvc_id=1559624 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=49766 pid=694313 user=pentester fd=181u ip_version=4 dvc_id=1559625 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=x-www-browser dest_ip=* dest_port=44954 pid=694313 user=pentester fd=164u ip_version=4 dvc_id=1561334 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77950 user=xrdp fd=11u ip_version=6 dvc_id=93046 transport=TCP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76662 user=root fd=7u ip_version=6 dvc_id=92215 transport=TCP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76662 user=root fd=6u ip_version=4 dvc_id=92205 transport=TCP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76561 user=root fd=7u ip_version=4 dvc_id=90749 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4006 transport=UDP


_raw: Sat Oct 18 11:22:14 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4150 transport=UDP


_raw: Sat Oct 18 11:22:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=96590 transport=TCP


_raw: Sat Oct 18 11:22:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 11:22:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=89926 transport=TCP


_raw: Sat Oct 18 11:22:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76515 user=root fd=7u ip_version=4 dvc_id=89895 transport=UDP


_raw: Sat Oct 18 11:22:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=548 transport=UDP


_raw: Sat Oct 18 11:22:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=528 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:22:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95384 transport=TCP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=7u ip_version=6 dvc_id=90832 transport=TCP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=6u ip_version=4 dvc_id=90830 transport=TCP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76529 user=root fd=7u ip_version=4 dvc_id=89061 transport=UDP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2954 transport=UDP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=x-www-browser dest_ip=* dest_port=54980 pid=702683 user=pentester fd=40u ip_version=4 dvc_id=904349 transport=UDP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78363 user=xrdp fd=11u ip_version=6 dvc_id=94672 transport=TCP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=7u ip_version=6 dvc_id=90053 transport=TCP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=6u ip_version=4 dvc_id=90051 transport=TCP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76946 user=root fd=7u ip_version=4 dvc_id=92362 transport=UDP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=2845 transport=UDP


_raw: Sat Oct 18 11:22:11 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1583 transport=UDP


_raw:
Proto   Port
udp    54980
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp     5353
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     1433
tcp     3350
tcp    37181
tcp     5985
tcp     5986
tcp     1883
tcp      443
tcp      445
tcp      389
tcp       53
tcp       21
tcp       22
tcp       25
tcp      110
tcp       80
tcp       88
tcp      135
tcp      139
tcp      143
tcp      636
tcp      587
tcp     3389
tcp    48394
tcp     3128
tcp     8080


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp       22


_raw: Sat Oct 18 11:22:08 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=703595 user=pentester fd=37u ip_version=6 dvc_id=837923 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37181 pid=703595 user=pentester fd=16u ip_version=6 dvc_id=835237 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=703383 user=root fd=37u ip_version=6 dvc_id=835155 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=703383 user=root fd=36u ip_version=6 dvc_id=835154 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=703383 user=root fd=35u ip_version=6 dvc_id=835153 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=703383 user=root fd=34u ip_version=6 dvc_id=838744 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=703383 user=root fd=33u ip_version=6 dvc_id=835152 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=703383 user=root fd=32u ip_version=6 dvc_id=835151 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=703383 user=root fd=31u ip_version=6 dvc_id=838743 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=703383 user=root fd=30u ip_version=6 dvc_id=837788 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=703383 user=root fd=29u ip_version=6 dvc_id=835150 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=703383 user=root fd=28u ip_version=6 dvc_id=835149 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=703383 user=root fd=27u ip_version=6 dvc_id=835148 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=703383 user=root fd=26u ip_version=6 dvc_id=838742 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=703383 user=root fd=25u ip_version=6 dvc_id=835147 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=703383 user=root fd=24u ip_version=6 dvc_id=837786 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=703383 user=root fd=23u ip_version=6 dvc_id=837785 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=703383 user=root fd=22u ip_version=6 dvc_id=837784 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=10.0.254.204 dest_port=443 pid=703383 user=root fd=21u ip_version=4 dvc_id=837787 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=703383 user=root fd=20u ip_version=6 dvc_id=837783 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=703383 user=root fd=19u ip_version=6 dvc_id=837782 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=703383 user=root fd=15u ip_version=6 dvc_id=837781 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=703383 user=root fd=14u ip_version=6 dvc_id=837780 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=3128 pid=703383 user=root fd=13u ip_version=6 dvc_id=833184 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=703383 user=root fd=12u ip_version=6 dvc_id=837779 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=48394 pid=703383 user=root fd=11u ip_version=6 dvc_id=835146 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=703383 user=root fd=10u ip_version=6 dvc_id=835145 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=703383 user=root fd=9u ip_version=6 dvc_id=837777 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=703383 user=root fd=8u ip_version=6 dvc_id=838738 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=703383 user=root fd=7u ip_version=6 dvc_id=835144 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=703383 user=root fd=6u ip_version=6 dvc_id=837775 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=696473 user=pentester fd=222u ip_version=4 dvc_id=855089 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77973 user=xrdp fd=11u ip_version=6 dvc_id=95395 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=7u ip_version=6 dvc_id=89887 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76614 user=root fd=6u ip_version=4 dvc_id=89885 transport=TCP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76514 user=root fd=7u ip_version=4 dvc_id=89845 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4343 transport=UDP


_raw: Sat Oct 18 11:22:08 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2834 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=35116 pid=696759 user=pentester fd=201u ip_version=4 dvc_id=1271185 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=39247 pid=696759 user=pentester fd=185u ip_version=4 dvc_id=1269670 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=53250 pid=696759 user=pentester fd=184u ip_version=4 dvc_id=1269669 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=59060 pid=696759 user=pentester fd=182u ip_version=4 dvc_id=1271161 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=54461 pid=696759 user=pentester fd=180u ip_version=4 dvc_id=1270781 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=52006 pid=696759 user=pentester fd=170u ip_version=4 dvc_id=1269625 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=60791 pid=696759 user=pentester fd=146u ip_version=4 dvc_id=1271971 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=48530 pid=696759 user=pentester fd=139u ip_version=4 dvc_id=1271133 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=59180 pid=696759 user=pentester fd=131u ip_version=4 dvc_id=1271109 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=41420 pid=696759 user=pentester fd=118u ip_version=4 dvc_id=1271943 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=57295 pid=696759 user=pentester fd=115u ip_version=4 dvc_id=1269400 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=32973 pid=696759 user=pentester fd=104u ip_version=4 dvc_id=1269635 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=60616 pid=696759 user=pentester fd=91u ip_version=4 dvc_id=1269634 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=firefox-esr dest_ip=* dest_port=53218 pid=696759 user=pentester fd=58u ip_version=4 dvc_id=1271160 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78485 user=xrdp fd=11u ip_version=6 dvc_id=93858 transport=TCP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=7u ip_version=6 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77133 user=root fd=6u ip_version=4 dvc_id=89952 transport=TCP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=77015 user=root fd=7u ip_version=4 dvc_id=91617 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3040 transport=UDP


_raw: Sat Oct 18 11:22:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=1698 transport=UDP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=714819 user=postgres fd=7u ip_version=4 dvc_id=946209 transport=TCP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=714805 user=mosquitto fd=5u ip_version=4 dvc_id=946193 transport=TCP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78125 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76786 user=root fd=7u ip_version=6 dvc_id=91469 transport=TCP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76786 user=root fd=6u ip_version=4 dvc_id=91467 transport=TCP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76653 user=root fd=7u ip_version=4 dvc_id=91412 transport=UDP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=725 transport=UDP


_raw: Sat Oct 18 11:22:04 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3671 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     1883
tcp     3350
tcp       22
tcp     5432
tcp     1883
tcp     3389


_raw: Sat Oct 18 11:22:03 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=701492 user=pentester fd=37u ip_version=6 dvc_id=863228 transport=TCP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=44343 pid=701492 user=pentester fd=16u ip_version=6 dvc_id=839389 transport=TCP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=firefox-esr dest_ip=* dest_port=58395 pid=695858 user=pentester fd=145u ip_version=4 dvc_id=952637 transport=UDP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78087 user=xrdp fd=11u ip_version=6 dvc_id=93987 transport=TCP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=89901 transport=TCP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=89899 transport=TCP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=90939 transport=UDP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3758 transport=UDP


_raw: Sat Oct 18 11:22:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=397 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    58395
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    44343


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:22:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77990 user=xrdp fd=11u ip_version=6 dvc_id=94139 transport=TCP


_raw: Sat Oct 18 11:22:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=7u ip_version=6 dvc_id=90611 transport=TCP


_raw: Sat Oct 18 11:22:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76733 user=root fd=6u ip_version=4 dvc_id=90609 transport=TCP


_raw: Sat Oct 18 11:22:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76632 user=root fd=7u ip_version=4 dvc_id=91722 transport=UDP


_raw: Sat Oct 18 11:22:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3611 transport=UDP


_raw: Sat Oct 18 11:22:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4119 transport=UDP


_raw: Sat Oct 18 11:21:57 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78140 user=xrdp fd=11u ip_version=6 dvc_id=95507 transport=TCP


_raw: Sat Oct 18 11:21:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=7u ip_version=6 dvc_id=88954 transport=TCP


_raw: Sat Oct 18 11:21:57 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=6u ip_version=4 dvc_id=88952 transport=TCP


_raw: Sat Oct 18 11:21:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76749 user=root fd=7u ip_version=4 dvc_id=88879 transport=UDP


_raw: Sat Oct 18 11:21:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=2040 transport=UDP


_raw: Sat Oct 18 11:21:57 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2024 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 11:21:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78131 user=xrdp fd=11u ip_version=6 dvc_id=94741 transport=TCP


_raw: Sat Oct 18 11:21:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=7u ip_version=6 dvc_id=93230 transport=TCP


_raw: Sat Oct 18 11:21:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76874 user=root fd=6u ip_version=4 dvc_id=93220 transport=TCP


_raw: Sat Oct 18 11:21:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76773 user=root fd=7u ip_version=4 dvc_id=91380 transport=UDP


_raw: Sat Oct 18 11:21:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=1578 transport=UDP


_raw: Sat Oct 18 11:21:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=2581 transport=UDP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=695565 user=root fd=282u ip_version=6 dvc_id=836895 transport=TCP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=695565 user=root fd=281u ip_version=6 dvc_id=836889 transport=TCP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=96593 transport=TCP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90751 transport=TCP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=90698 transport=UDP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3656 transport=UDP


_raw: Sat Oct 18 11:21:51 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=1563 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     7687
tcp     7474
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=56762 pid=712148 user=pentester fd=146u ip_version=4 dvc_id=846427 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=59886 pid=712148 user=pentester fd=144u ip_version=4 dvc_id=846426 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=52302 pid=712148 user=pentester fd=140u ip_version=4 dvc_id=846213 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=37317 pid=712148 user=pentester fd=136u ip_version=4 dvc_id=847643 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=42121 pid=712148 user=pentester fd=134u ip_version=4 dvc_id=846223 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=43289 pid=712148 user=pentester fd=128u ip_version=4 dvc_id=846215 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=40995 pid=712148 user=pentester fd=124u ip_version=4 dvc_id=846198 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=58058 pid=712148 user=pentester fd=116u ip_version=4 dvc_id=848372 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=41463 pid=712148 user=pentester fd=110u ip_version=4 dvc_id=848368 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=39140 pid=712148 user=pentester fd=109u ip_version=4 dvc_id=848365 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=34668 pid=712148 user=pentester fd=108u ip_version=4 dvc_id=848364 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=50649 pid=712148 user=pentester fd=107u ip_version=4 dvc_id=846183 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=52709 pid=712148 user=pentester fd=106u ip_version=4 dvc_id=848359 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=44786 pid=712148 user=pentester fd=105u ip_version=4 dvc_id=846172 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=57992 pid=712148 user=pentester fd=84u ip_version=4 dvc_id=845661 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=x-www-browser dest_ip=* dest_port=34180 pid=712148 user=pentester fd=50u ip_version=4 dvc_id=845166 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77961 user=xrdp fd=11u ip_version=6 dvc_id=93129 transport=TCP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=7u ip_version=6 dvc_id=91091 transport=TCP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=6u ip_version=4 dvc_id=91089 transport=TCP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76599 user=root fd=7u ip_version=4 dvc_id=91751 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3650 transport=UDP


_raw: Sat Oct 18 11:21:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=551 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp       53
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:21:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78024 user=xrdp fd=11u ip_version=6 dvc_id=95366 transport=TCP


_raw: Sat Oct 18 11:21:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=7u ip_version=6 dvc_id=90581 transport=TCP


_raw: Sat Oct 18 11:21:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76766 user=root fd=6u ip_version=4 dvc_id=90579 transport=TCP


_raw: Sat Oct 18 11:21:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76650 user=root fd=7u ip_version=4 dvc_id=91431 transport=UDP


_raw: Sat Oct 18 11:21:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3563 transport=UDP


_raw: Sat Oct 18 11:21:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4254 transport=UDP


_raw: Sat Oct 18 11:21:42 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95973 transport=TCP


_raw: Sat Oct 18 11:21:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=7u ip_version=6 dvc_id=89832 transport=TCP


_raw: Sat Oct 18 11:21:42 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76673 user=root fd=6u ip_version=4 dvc_id=89830 transport=TCP


_raw: Sat Oct 18 11:21:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76570 user=root fd=7u ip_version=4 dvc_id=89004 transport=UDP


_raw: Sat Oct 18 11:21:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4122 transport=UDP


_raw: Sat Oct 18 11:21:42 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=1765 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp       22


_raw: Sat Oct 18 11:21:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77970 user=xrdp fd=11u ip_version=6 dvc_id=94557 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=90619 transport=UDP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=9392 pid=703709 user=root fd=4u ip_version=4 dvc_id=874097 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=40419 pid=699779 user=root fd=7u ip_version=4 dvc_id=858870 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78098 user=xrdp fd=11u ip_version=6 dvc_id=95039 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=91797 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=91795 transport=TCP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90585 transport=UDP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4009 transport=UDP


_raw: Sat Oct 18 11:21:34 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4226 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     9392
tcp    40419
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:21:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77894 user=xrdp fd=11u ip_version=6 dvc_id=96270 transport=TCP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=90515 transport=TCP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=90513 transport=TCP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76510 user=root fd=7u ip_version=4 dvc_id=90457 transport=UDP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=706 user=root fd=7u ip_version=4 dvc_id=569 transport=UDP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=3564 transport=UDP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=93161 transport=TCP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76745 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76745 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76638 user=root fd=7u ip_version=4 dvc_id=91378 transport=UDP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=693 user=root fd=7u ip_version=4 dvc_id=3681 transport=UDP


_raw: Sat Oct 18 11:21:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=611 user=root fd=7u ip_version=4 dvc_id=1887 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:21:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95177 transport=TCP


_raw: Sat Oct 18 11:21:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=7u ip_version=6 dvc_id=92362 transport=TCP


_raw: Sat Oct 18 11:21:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=6u ip_version=4 dvc_id=92360 transport=TCP


_raw: Sat Oct 18 11:21:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76530 user=root fd=7u ip_version=4 dvc_id=91417 transport=UDP


_raw: Sat Oct 18 11:21:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=1629 transport=UDP


_raw: Sat Oct 18 11:21:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=2879 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 11:21:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78160 user=xrdp fd=11u ip_version=6 dvc_id=94017 transport=TCP


_raw: Sat Oct 18 11:21:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=7u ip_version=6 dvc_id=91328 transport=TCP


_raw: Sat Oct 18 11:21:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=6u ip_version=4 dvc_id=91326 transport=TCP


_raw: Sat Oct 18 11:21:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76805 user=root fd=7u ip_version=4 dvc_id=92243 transport=UDP


_raw: Sat Oct 18 11:21:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4112 transport=UDP


_raw: Sat Oct 18 11:21:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1973 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       22
tcp       80
tcp       22


_raw: Sat Oct 18 11:21:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78062 user=xrdp fd=11u ip_version=6 dvc_id=96395 transport=TCP


_raw: Sat Oct 18 11:21:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=7u ip_version=6 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 11:21:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76717 user=root fd=6u ip_version=4 dvc_id=91656 transport=TCP


_raw: Sat Oct 18 11:21:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76616 user=root fd=7u ip_version=4 dvc_id=90856 transport=UDP


_raw: Sat Oct 18 11:21:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4271 transport=UDP


_raw: Sat Oct 18 11:21:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3860 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 11:21:22 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=694384 user=postgres fd=7u ip_version=4 dvc_id=814386 transport=TCP


_raw: Sat Oct 18 11:21:22 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78019 user=xrdp fd=11u ip_version=6 dvc_id=92973 transport=TCP


_raw: Sat Oct 18 11:21:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=7u ip_version=6 dvc_id=89597 transport=TCP


_raw: Sat Oct 18 11:21:22 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76687 user=root fd=6u ip_version=4 dvc_id=89595 transport=TCP


_raw: Sat Oct 18 11:21:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76586 user=root fd=7u ip_version=4 dvc_id=89527 transport=UDP


_raw: Sat Oct 18 11:21:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=486 transport=UDP


_raw: Sat Oct 18 11:21:22 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4189 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     5432
tcp     5432
tcp       22
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 11:21:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77819 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76558 user=root fd=7u ip_version=6 dvc_id=90637 transport=TCP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76558 user=root fd=6u ip_version=4 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76453 user=root fd=7u ip_version=4 dvc_id=91498 transport=UDP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2899 transport=UDP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=2881 transport=UDP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77856 user=xrdp fd=11u ip_version=6 dvc_id=95414 transport=TCP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=7u ip_version=6 dvc_id=89956 transport=TCP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=6u ip_version=4 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76497 user=root fd=7u ip_version=4 dvc_id=91466 transport=UDP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=2707 transport=UDP


_raw: Sat Oct 18 11:21:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 11:21:17 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78326 user=xrdp fd=11u ip_version=6 dvc_id=95514 transport=TCP


_raw: Sat Oct 18 11:21:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77063 user=root fd=7u ip_version=6 dvc_id=92519 transport=TCP


_raw: Sat Oct 18 11:21:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77063 user=root fd=6u ip_version=4 dvc_id=92517 transport=TCP


_raw: Sat Oct 18 11:21:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76962 user=root fd=7u ip_version=4 dvc_id=90703 transport=UDP


_raw: Sat Oct 18 11:21:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=4506 transport=UDP


_raw: Sat Oct 18 11:21:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=622 user=root fd=7u ip_version=4 dvc_id=4484 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=703827 user=root fd=36u ip_version=6 dvc_id=849087 transport=UDP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=703827 user=root fd=35u ip_version=6 dvc_id=848246 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=703827 user=root fd=34u ip_version=6 dvc_id=849086 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=703827 user=root fd=33u ip_version=6 dvc_id=848245 transport=UDP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=703827 user=root fd=32u ip_version=6 dvc_id=848244 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=703827 user=root fd=31u ip_version=6 dvc_id=849085 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=703827 user=root fd=30u ip_version=6 dvc_id=849084 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=703827 user=root fd=29u ip_version=6 dvc_id=848243 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=703827 user=root fd=28u ip_version=6 dvc_id=848242 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=703827 user=root fd=27u ip_version=6 dvc_id=848241 transport=UDP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=703827 user=root fd=26u ip_version=6 dvc_id=848240 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=703827 user=root fd=25u ip_version=6 dvc_id=848239 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=703827 user=root fd=24u ip_version=6 dvc_id=848238 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=703827 user=root fd=23u ip_version=6 dvc_id=849083 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=703827 user=root fd=22u ip_version=6 dvc_id=849082 transport=UDP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=703827 user=root fd=21u ip_version=6 dvc_id=846160 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=703827 user=root fd=20u ip_version=6 dvc_id=847079 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=703827 user=root fd=19u ip_version=4 dvc_id=846161 transport=UDP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=703827 user=root fd=18u ip_version=6 dvc_id=846159 transport=UDP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=703827 user=root fd=14u ip_version=6 dvc_id=849081 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=703827 user=root fd=13u ip_version=6 dvc_id=847076 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=46188 pid=703827 user=root fd=12u ip_version=6 dvc_id=849080 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=703827 user=root fd=11u ip_version=6 dvc_id=849079 transport=TCP


_raw: Sat Oct 18 11:21:13 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=703827 user=root fd=10u ip_version=6 dvc_id=847074 transport=TCP