Most tools run perfectly on standard Android firmware.
If you compromise a Linux server:
Law enforcement agencies monitor for unauthorized scanning. Even Termux packets leave traces in server logs. Termux Hacking Full Course