↑ ↓ select, Enter open, Esc close

Find files modified in the last minutes

Adjust the values, the command updates live
user@server
find /var/www/vhosts/example.com/httpdocs -type f -mmin -60 -printf '%TY-%Tm-%Td %TH:%TM  %p\n' | sort -r

Lists files whose content was modified within the given number of minutes, with timestamp and newest first. Useful for seeing what an update, a plugin or an attacker has just written. For days instead of minutes, use -mtime -2 (last two days).

Note: Attackers sometimes reset timestamps. Use -cmin instead of -mmin to check the status change time, which is harder to fake.

Also searched as

  • find recently modified files linux
  • which files changed in the last hour
  • wordpress hacked find modified files
  • show recently changed files

Related one-liners

All in Filesystem

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.