A security analyst discovers the following firewall log entries during an incident:

Which of the following is MOST likely occurring?