Thu Jun 4 22:12:34 PDT 2026
netstat -pant
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:10201 0.0.0.0:* LISTEN 1612/conEcho
tcp 0 0 0.0.0.0:10202 0.0.0.0:* LISTEN 1649/conGoodbye
tcp 0 0 0.0.0.0:10203 0.0.0.0:* LISTEN 1680/conAdd
tcp 0 0 0.0.0.0:10204 0.0.0.0:* LISTEN 1701/conSub
tcp 0 0 0.0.0.0:20022 0.0.0.0:* LISTEN 13146/python
tcp 0 0 0.0.0.0:20025 0.0.0.0:* LISTEN 13149/python
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1286/sshd
tcp 0 0 0.0.0.0:2647 0.0.0.0:* LISTEN 1713/multichaind
tcp 0 0 0.0.0.0:3000 0.0.0.0:* LISTEN 22635/python
tcp 0 0 0.0.0.0:3001 0.0.0.0:* LISTEN 4415/python
tcp 0 0 0.0.0.0:3003 0.0.0.0:* LISTEN 18973/python
tcp 0 0 0.0.0.0:3100 0.0.0.0:* LISTEN 18984/python
tcp 0 0 0.0.0.0:3200 0.0.0.0:* LISTEN 19000/python
tcp 0 0 0.0.0.0:3300 0.0.0.0:* LISTEN 727/python
tcp 0 0 0.0.0.0:3400 0.0.0.0:* LISTEN 12681/python
tcp 0 0 0.0.0.0:3500 0.0.0.0:* LISTEN 19040/python
tcp 0 0 0.0.0.0:8888 0.0.0.0:* LISTEN 30626/python
tcp 0 0 127.0.0.1:2646 0.0.0.0:* LISTEN 1713/multichaind
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 1298/mysqld
tcp 0 0 127.0.0.1:52010 0.0.0.0:* LISTEN 1235/containerd
tcp 0 0 198.199.94.12:10201 176.120.22.240:58243 ESTABLISHED 19282/conEcho
tcp 0 0 198.199.94.12:10201 66.132.172.131:54144 ESTABLISHED 23941/conEcho
tcp 0 0 198.199.94.12:10201 66.132.172.196:32188 ESTABLISHED 22800/conEcho
tcp 0 0 198.199.94.12:10204 130.65.254.14:46230 ESTABLISHED 4643/conSub
tcp 0 0 198.199.94.12:10204 195.96.139.174:51415 ESTABLISHED 24973/conSub
tcp 0 0 198.199.94.12:20022 147.144.3.239:3271 ESTABLISHED 13146/python
tcp 0 0 198.199.94.12:20025 147.144.3.239:36674 ESTABLISHED 13149/python
tcp 0 1 198.199.94.12:58632 172.17.0.1:2647 SYN_SENT 1713/multichaind
tcp 10 0 198.199.94.12:20025 87.236.176.198:49559 CLOSE_WAIT -
tcp 1023 0 198.199.94.12:25500 23.234.94.33:37586 CLOSE_WAIT 8548/sh
tcp 19 0 198.199.94.12:25500 23.234.94.33:32956 CLOSE_WAIT 18556/sh
tcp 200 0 198.199.94.12:20025 87.236.176.216:60261 CLOSE_WAIT -
tcp 27 0 198.199.94.12:25500 23.234.94.33:42396 CLOSE_WAIT 16431/sh
tcp6 0 0 :::10101 :::* LISTEN 24473/python
tcp6 0 0 :::10111 :::* LISTEN 25696/python
tcp6 0 0 :::10112 :::* LISTEN 9356/python
tcp6 0 0 :::10113 :::* LISTEN 3190/python
tcp6 0 0 :::10114 :::* LISTEN 24877/python
tcp6 0 0 :::10121 :::* LISTEN 30539/python
tcp6 0 0 :::10122 :::* LISTEN 15841/python
tcp6 0 0 :::10123 :::* LISTEN 6678/python
tcp6 0 0 :::10124 :::* LISTEN 9260/python
tcp6 0 0 :::10301 :::* LISTEN 4038/python
tcp6 0 0 :::11223 :::* LISTEN 19107/python
tcp6 0 0 ::1:2646 :::* LISTEN 1713/multichaind
tcp6 0 0 198.199.94.12:10101 66.132.195.48:29118 ESTABLISHED 24473/python
tcp6 0 0 198.199.94.12:10123 66.132.186.168:6452 ESTABLISHED 6678/python
tcp6 0 0 198.199.94.12:10124 66.132.172.205:53110 ESTABLISHED 9260/python
tcp6 0 0 198.199.94.12:80 104.22.17.147:10074 TIME_WAIT -
tcp6 0 0 198.199.94.12:80 104.22.20.40:13666 ESTABLISHED 28189/apache2
tcp6 0 0 198.199.94.12:80 162.158.167.90:11331 TIME_WAIT -
tcp6 0 0 198.199.94.12:80 168.119.96.239:14452 TIME_WAIT -
tcp6 0 0 198.199.94.12:80 172.71.158.45:10074 TIME_WAIT -
tcp6 0 0 198.199.94.12:80 172.71.158.45:12062 ESTABLISHED 25329/apache2
tcp6 0 0 198.199.94.12:80 72.59.241.40:65165 FIN_WAIT2 -
tcp6 0 0 :::21 :::* LISTEN 1246/vsftpd
tcp6 0 0 :::2647 :::* LISTEN 1713/multichaind
tcp6 0 0 :::5000 :::* LISTEN 15671/python
tcp6 0 0 :::5090 :::* LISTEN 7359/python
tcp6 0 0 :::6000 :::* LISTEN 8380/python
tcp6 0 0 :::80 :::* LISTEN 1407/apache2
tcp6 200 0 198.199.94.12:10124 87.236.176.59:50385 CLOSE_WAIT -
tcp6 4 0 198.199.94.12:10123 87.236.176.131:48183 CLOSE_WAIT -
tcp6 4 0 198.199.94.12:10124 185.247.137.68:46649 CLOSE_WAIT -
tcp 95 0 198.199.94.12:25500 23.234.94.33:50934 CLOSE_WAIT 13971/sh
netstat -panu
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
udp 0 0 0.0.0.0:1113 0.0.0.0:* 11816/socat
udp 0 0 0.0.0.0:443 0.0.0.0:* 425/openvpn
udp 0 0 0.0.0.0:9900 0.0.0.0:* 11096/ncat
udp 0 0 0.0.0.0:9901 0.0.0.0:* 11103/ncat
udp 0 0 0.0.0.0:9910 0.0.0.0:* 11108/ncat
udp 0 0 0.0.0.0:9911 0.0.0.0:* 11113/ncat
udp 0 0 0.0.0.0:9920 0.0.0.0:* 11118/ncat
udp 0 0 0.0.0.0:9921 0.0.0.0:* 11125/ncat
udp6 0 0 :::9900 :::* 11096/ncat
udp6 0 0 :::9901 :::* 11103/ncat
udp6 0 0 :::9910 :::* 11108/ncat
udp6 0 0 :::9911 :::* 11113/ncat
udp6 0 0 :::9920 :::* 11118/ncat
udp6 0 0 :::9921 :::* 11125/ncat
ps aux | grep python
samftp 727 0.0 0.3 34180 6360 ? S May14 0:00 /usr/bin/python /var/www/html/init.d/listen3300.py
samftp 3190 0.0 0.3 36616 6476 ? S 13:33 0:00 /usr/bin/python /var/www/html/init.d/listen10113.py
samftp 4038 0.0 0.3 34180 6364 ? S May21 0:00 /usr/bin/python /var/www/html/init.d/listen10301.py
samftp 4415 0.0 0.3 34180 6348 ? S May24 0:00 /usr/bin/python /var/www/html/init.d/listen3001.py
samftp 6678 0.0 0.3 36616 6476 ? S Apr14 0:00 /usr/bin/python /var/www/html/init.d/listen10123.py
samftp 7359 0.0 0.3 34180 6356 ? S May14 0:00 /usr/bin/python /var/www/html/init.d/listen5090.py
samftp 8380 0.0 0.3 34180 6388 ? S Jun01 0:00 /usr/bin/python /var/www/html/init.d/listen6000.py
www-data 8577 0.0 0.2 32776 5252 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
samftp 9260 0.0 0.3 36624 6736 ? S Apr09 0:00 /usr/bin/python /var/www/html/init.d/listen10124.py
samftp 9356 0.0 0.3 34180 6296 ? S May31 0:00 /usr/bin/python /var/www/html/init.d/listen10112.py
root 11880 0.0 0.0 14220 976 ? S 22:12 0:00 grep python
samftp 12681 0.0 0.3 34180 6356 ? S May09 0:00 /usr/bin/python /var/www/html/init.d/listen3400.py
samftp 13146 0.0 0.3 34180 6368 ? S Apr27 0:00 /usr/bin/python /var/www/html/init.d/listen20022.py
samftp 13149 0.0 0.3 34180 6364 ? S Apr27 0:00 /usr/bin/python /var/www/html/init.d/listen20025.py
root 15195 0.0 0.2 32776 5244 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
samftp 15671 0.0 0.3 34180 6292 ? S 14:01 0:00 /usr/bin/python /var/www/html/init.d/listen5000.py
samftp 15841 0.0 0.3 34180 6292 ? S 17:35 0:00 /usr/bin/python /var/www/html/init.d/listen10122.py
www-data 16493 0.0 0.2 32520 5000 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
www-data 18586 0.0 0.2 32520 5000 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
samftp 18973 0.0 0.3 34180 6356 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen3003.py
samftp 18984 0.0 0.3 34180 6356 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen3100.py
samftp 19000 0.0 0.3 34180 6360 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen3200.py
samftp 19040 0.0 0.3 34180 6356 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen3500.py
samftp 19107 0.0 0.3 34180 6364 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen11223.py
samftp 22635 0.0 0.3 34180 6360 ? S Jun03 0:00 /usr/bin/python /var/www/html/init.d/listen3000.py
samftp 24473 0.0 0.3 34180 6364 ? S Apr14 0:00 /usr/bin/python /var/www/html/init.d/listen10101.py
samftp 24877 0.0 0.3 36624 6736 ? S Jun02 0:00 /usr/bin/python /var/www/html/init.d/listen10114.py
samftp 25696 0.0 0.2 34180 6124 ? S 21:32 0:00 /usr/bin/python /var/www/html/init.d/listen10111.py
samftp 30539 0.0 0.3 34180 6360 ? S 20:31 0:00 /usr/bin/python /var/www/html/init.d/listen10121.py
root 30626 0.0 0.3 34404 6212 ? S 21:43 0:00 /usr/bin/python /usr/bin/header1.py