Fri Jul 17 17:34:36 PDT 2026
netstat -pant
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:10201 0.0.0.0:* LISTEN 1612/conEcho
tcp 0 0 0.0.0.0:10202 0.0.0.0:* LISTEN 1649/conGoodbye
tcp 0 0 0.0.0.0:10203 0.0.0.0:* LISTEN 1680/conAdd
tcp 0 0 0.0.0.0:10204 0.0.0.0:* LISTEN 1701/conSub
tcp 0 0 0.0.0.0:20022 0.0.0.0:* LISTEN 13146/python
tcp 0 0 0.0.0.0:20025 0.0.0.0:* LISTEN 13149/python
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1286/sshd
tcp 0 0 0.0.0.0:2647 0.0.0.0:* LISTEN 1713/multichaind
tcp 0 0 0.0.0.0:3000 0.0.0.0:* LISTEN 28031/python
tcp 0 0 0.0.0.0:3001 0.0.0.0:* LISTEN 2710/python
tcp 0 0 0.0.0.0:3003 0.0.0.0:* LISTEN 5275/python
tcp 0 0 0.0.0.0:3100 0.0.0.0:* LISTEN 18984/python
tcp 0 0 0.0.0.0:3200 0.0.0.0:* LISTEN 19000/python
tcp 0 0 0.0.0.0:3300 0.0.0.0:* LISTEN 727/python
tcp 0 0 0.0.0.0:3400 0.0.0.0:* LISTEN 12681/python
tcp 0 0 0.0.0.0:3500 0.0.0.0:* LISTEN 19040/python
tcp 0 0 0.0.0.0:8888 0.0.0.0:* LISTEN 16297/python
tcp 0 0 127.0.0.1:2646 0.0.0.0:* LISTEN 1713/multichaind
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 1298/mysqld
tcp 0 0 127.0.0.1:52010 0.0.0.0:* LISTEN 1235/containerd
tcp 0 0 198.199.94.12:10201 176.120.22.240:58243 ESTABLISHED 19282/conEcho
tcp 0 0 198.199.94.12:10201 66.132.172.131:54144 ESTABLISHED 23941/conEcho
tcp 0 0 198.199.94.12:10201 66.132.172.196:32188 ESTABLISHED 22800/conEcho
tcp 0 0 198.199.94.12:10204 130.65.254.14:46230 ESTABLISHED 4643/conSub
tcp 0 0 198.199.94.12:10204 195.96.139.174:51415 ESTABLISHED 24973/conSub
tcp 0 0 198.199.94.12:20022 147.144.3.239:3271 ESTABLISHED 13146/python
tcp 0 0 198.199.94.12:20025 147.144.3.239:36674 ESTABLISHED 13149/python
tcp 0 1 198.199.94.12:42064 172.17.0.1:2647 SYN_SENT 1713/multichaind
tcp 10 0 198.199.94.12:20025 87.236.176.198:49559 CLOSE_WAIT -
tcp 1023 0 198.199.94.12:25500 23.234.94.33:37586 CLOSE_WAIT 8548/sh
tcp 19 0 198.199.94.12:25500 23.234.94.33:32956 CLOSE_WAIT 18556/sh
tcp 200 0 198.199.94.12:20025 87.236.176.216:60261 CLOSE_WAIT -
tcp 27 0 198.199.94.12:25500 23.234.94.33:42396 CLOSE_WAIT 16431/sh
tcp6 0 0 :::10101 :::* LISTEN 24473/python
tcp6 0 0 :::10111 :::* LISTEN 26947/python
tcp6 0 0 :::10112 :::* LISTEN 12755/python
tcp6 0 0 :::10113 :::* LISTEN 17511/python
tcp6 0 0 :::10114 :::* LISTEN 12362/python
tcp6 0 0 :::10121 :::* LISTEN 8825/python
tcp6 0 0 :::10122 :::* LISTEN 2146/python
tcp6 0 0 :::10123 :::* LISTEN 6678/python
tcp6 0 0 :::10124 :::* LISTEN 9260/python
tcp6 0 0 :::10301 :::* LISTEN 27370/python
tcp6 0 0 :::11223 :::* LISTEN 19107/python
tcp6 0 0 ::1:2646 :::* LISTEN 1713/multichaind
tcp6 0 0 198.199.94.12:10101 66.132.195.48:29118 ESTABLISHED 24473/python
tcp6 0 0 198.199.94.12:10122 195.96.139.70:44087 ESTABLISHED 2146/python
tcp6 0 0 198.199.94.12:10123 66.132.186.168:6452 ESTABLISHED 6678/python
tcp6 0 0 198.199.94.12:10124 66.132.172.205:53110 ESTABLISHED 9260/python
tcp6 0 0 198.199.94.12:80 157.90.156.63:8296 TIME_WAIT -
tcp6 0 0 :::21 :::* LISTEN 1246/vsftpd
tcp6 0 0 :::2647 :::* LISTEN 1713/multichaind
tcp6 0 0 :::5000 :::* LISTEN 21245/python
tcp6 0 0 :::5090 :::* LISTEN 7359/python
tcp6 0 0 :::6000 :::* LISTEN 4088/python
tcp6 0 0 :::80 :::* LISTEN 1407/apache2
tcp6 200 0 198.199.94.12:10124 87.236.176.59:50385 CLOSE_WAIT -
tcp6 2 0 198.199.94.12:10122 85.217.149.24:44768 CLOSE_WAIT -
tcp6 2 0 198.199.94.12:10122 85.217.149.27:37400 CLOSE_WAIT -
tcp6 2 0 198.199.94.12:10122 85.217.149.74:52682 CLOSE_WAIT -
tcp6 4 0 198.199.94.12:10123 87.236.176.131:48183 CLOSE_WAIT -
tcp6 4 0 198.199.94.12:10124 185.247.137.68:46649 CLOSE_WAIT -
tcp 95 0 198.199.94.12:25500 23.234.94.33:50934 CLOSE_WAIT 13971/sh
netstat -panu
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
udp 0 0 0.0.0.0:1113 0.0.0.0:* 31193/socat
udp 0 0 0.0.0.0:443 0.0.0.0:* 425/openvpn
udp 0 0 0.0.0.0:9900 0.0.0.0:* 29417/ncat
udp 0 0 0.0.0.0:9901 0.0.0.0:* 29424/ncat
udp 0 0 0.0.0.0:9910 0.0.0.0:* 29429/ncat
udp 0 0 0.0.0.0:9911 0.0.0.0:* 29434/ncat
udp 0 0 0.0.0.0:9920 0.0.0.0:* 29441/ncat
udp 0 0 0.0.0.0:9921 0.0.0.0:* 29446/ncat
udp6 0 0 :::9900 :::* 29417/ncat
udp6 0 0 :::9901 :::* 29424/ncat
udp6 0 0 :::9910 :::* 29429/ncat
udp6 0 0 :::9911 :::* 29434/ncat
udp6 0 0 :::9920 :::* 29441/ncat
udp6 0 0 :::9921 :::* 29446/ncat
ps aux | grep python
samftp 727 0.0 0.3 34180 6360 ? S May14 0:00 /usr/bin/python /var/www/html/init.d/listen3300.py
samftp 2146 0.0 0.3 34180 6292 ? S Jun26 0:00 /usr/bin/python /var/www/html/init.d/listen10122.py
samftp 2710 0.0 0.3 34180 6352 ? S Jul08 0:00 /usr/bin/python /var/www/html/init.d/listen3001.py
samftp 4088 0.0 0.3 34180 6392 ? S Jul09 0:00 /usr/bin/python /var/www/html/init.d/listen6000.py
samftp 5275 0.0 0.3 34180 6356 ? S Jul08 0:00 /usr/bin/python /var/www/html/init.d/listen3003.py
samftp 6678 0.0 0.3 36616 6476 ? S Apr14 0:00 /usr/bin/python /var/www/html/init.d/listen10123.py
samftp 7359 0.0 0.3 34180 6356 ? S May14 0:00 /usr/bin/python /var/www/html/init.d/listen5090.py
www-data 8577 0.0 0.2 32776 5212 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
samftp 8825 0.0 0.2 34180 6128 ? S 16:46 0:00 /usr/bin/python /var/www/html/init.d/listen10121.py
samftp 9260 0.0 0.3 36624 6736 ? S Apr09 0:00 /usr/bin/python /var/www/html/init.d/listen10124.py
samftp 12362 0.0 0.3 36624 6740 ? S Jul16 0:00 /usr/bin/python /var/www/html/init.d/listen10114.py
samftp 12681 0.0 0.3 34180 6356 ? S May09 0:00 /usr/bin/python /var/www/html/init.d/listen3400.py
samftp 12755 0.0 0.3 34180 6292 ? S Jul16 0:00 /usr/bin/python /var/www/html/init.d/listen10112.py
samftp 13146 0.0 0.3 34180 6368 ? S Apr27 0:00 /usr/bin/python /var/www/html/init.d/listen20022.py
samftp 13149 0.0 0.3 34180 6364 ? S Apr27 0:00 /usr/bin/python /var/www/html/init.d/listen20025.py
root 15195 0.0 0.2 32776 5204 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
root 16297 0.0 0.3 34404 6216 ? S 14:46 0:00 /usr/bin/python /usr/bin/header1.py
www-data 16493 0.0 0.2 32520 4960 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
samftp 17511 0.0 0.3 36616 6472 ? S 10:33 0:00 /usr/bin/python /var/www/html/init.d/listen10113.py
www-data 18586 0.0 0.2 32520 4960 ? S May09 0:00 python -c import pty; pty.spawn("/bin/bash")
samftp 18984 0.0 0.3 34180 6356 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen3100.py
samftp 19000 0.0 0.3 34180 6360 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen3200.py
samftp 19040 0.0 0.3 34180 6356 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen3500.py
samftp 19107 0.0 0.3 34180 6364 ? S May15 0:00 /usr/bin/python /var/www/html/init.d/listen11223.py
samftp 21245 0.0 0.3 34436 6388 ? S Jul08 0:00 /usr/bin/python /var/www/html/init.d/listen5000.py
samftp 24473 0.0 0.3 34180 6364 ? S Apr14 0:00 /usr/bin/python /var/www/html/init.d/listen10101.py
samftp 26947 0.0 0.2 34180 6124 ? S 09:48 0:00 /usr/bin/python /var/www/html/init.d/listen10111.py
samftp 27370 0.0 0.2 34180 6124 ? S 03:39 0:00 /usr/bin/python /var/www/html/init.d/listen10301.py
samftp 28031 0.0 0.3 34180 6360 ? S Jul15 0:00 /usr/bin/python /var/www/html/init.d/listen3000.py
root 31247 0.0 0.0 14220 976 ? S 17:34 0:00 grep python