Find out the process that opened thr port
netstat -tulpn
ls -l /proc/1138/exe
fuser 7000/tcp
pwdx <pid>
ps aux | grep <pid>
ps -o pid,user,%mem,command ax | sort -b -k3 -r |more
/bin/traceroute -n -w 1 -m 20 -T -p 80 <ip>
Check installed list
apt list --installed
sort -n -t$'\t' -k 2 other.tsv > other.sorted.tsv
split -l 1000000 -d -a 4 all_input input
# start at number 0350
split -l 100000 --numeric-suffixes=0350 -a 4 other.tsv input
awk '{ if ($4 == 1) { print } }'
awk '{sub("02/06/2020","12/06/2020")}1' $1 > temp.txt
grep -i 'killed process' /var/log/messages
dmesg -T| grep -E -i -B100 'killed process'
grep -rnw --include=\*.{py,sh} . -e "011st.com"