Linux server.edchosting.com 4.18.0-553.79.1.lve.el7h.x86_64 #1 SMP Wed Oct 15 16:34:46 UTC 2025 x86_64
LiteSpeed
Server IP : 75.98.162.185 & Your IP : 216.73.216.1
Domains :
Cant Read [ /etc/named.conf ]
User : goons4good
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
opt /
sp_scripts /
Delete
Unzip
Name
Size
Permission
Date
Action
accounts_audit.sh
1.05
KB
-rwxr-xr-x
2026-02-24 11:05
fix_cagefs
474
B
-rwxr-xr-x
2026-02-24 11:05
jb5_to_cpanel_convertor.sh
13.78
KB
-rwxr-xr-x
2026-02-24 11:05
log_flood_block.sh
5.18
KB
-rwxr-xr-x
2026-02-24 11:05
lstop.py
1.19
KB
-rwxr-xr-x
2026-02-24 11:05
phpmoves.sh
1.59
KB
-rwxr-xr-x
2026-02-24 11:05
post_transfer_cleanup.sh
3.28
KB
-rwxr-xr-x
2026-02-24 11:05
reseller_csf_priv.php
282
B
-rwxr-xr-x
2026-02-24 11:05
sp_remote_sql.php
2.73
KB
-rwxr-xr-x
2026-02-24 11:05
uap.py
3.83
KB
-rwxr-xr-x
2026-02-24 11:05
wellknown.sh
2.48
KB
-rwxr-xr-x
2026-02-24 11:05
Save
Rename
#!/bin/bash # 2023 (C) WorldHost Group # Tsvetan Gerov <tsvetan@worldhost.group> # THOLD="2G" DUCMD="du -sh -t ${THOLD}" DOCROOTS=$(grep DocumentRoot /etc/apache2/conf/httpd.conf | awk '{print$2}' | sort | uniq) CPUSERS=$(ls /var/cpanel/users) # Well-known cache/backups locations LOCATIONS=" /wp-content/updraft/ /wp-content/ai1wm-backups/ /wp-content/ebwp-backups/ /wp-content/backuply/ /wp-content/cache/ /var/log/ /.npm/cache/ /wp-content/cache/tmpWpfc/ /wp-content/cache/autoptimize/ /wp-content/litespeed/ /error_log " USERLOCATIONS=" /lscache/ /softaculous_backups/ " echo_header() { echo "========== $1 ==========" } # Locations under domain/subdomain echo_header "USER CONTENT" for DOCROOT in $DOCROOTS; do for LOCATION in $LOCATIONS; do if [ -d ${DOCROOT}${LOCATION} ]; then $DUCMD ${DOCROOT}${LOCATION} fi done done # Loctions inside user's homedir for CPUSER in $CPUSERS; do CPHOME=$(getent passwd $CPUSER | cut -f 6 -d :) if [ ! -z $CPHOME ]; then for USERLOCATION in $USERLOCATIONS; do if [ -d ${CPHOME}/${USERLOCATION} ]; then $DUCMD ${CPHOME}/${USERLOCATION} fi done fi done echo_header "SERVER CONTENT" $DUCMD /usr/local/jetapps/usr/jetbackup5/downloads/ $DUCMD /usr/local/jetapps/usr/jetbackup5/workspace/ $DUCMD /var/log/ echo_header "Oversized log files" find /var/log/ -size +1G -exec du -sh {} \; echo_header "Oversized MySQL databases" du -sh -t 10G /var/lib/mysql/* RESELLERS=$(cat /var/cpanel/resellers | cut -f 1 -d :) SERVER=$(hostname) echo_header "Standard users over 50GB" CPUSERS=$(grep OWNER=root /var/cpanel/users/* | cut -f 1 -d : | xargs -n 1 basename) for CPUSER in $CPUSERS; do if grep -q -w $CPUSER /etc/passwd; then USED=$(whmapi1 --output=jsonpretty accountsummary user=$CPUSER | jq -r '.data.acct[].diskused' | sed 's/M//') USED_INT=${USED%.*} ACCOUNT_IP=$(grep ^IP /var/cpanel/users/$CPUSER | cut -f 2 -d =) if [ "$USED_INT" -gt "50000" ]; then echo "$SERVER;$ACCOUNT_IP;$CPUSER;$USED_INT" fi fi done echo_header "Resellers over 150GB" for RESELLER in $RESELLERS; do USED=$(whmapi1 --output=jsonpretty resellerstats user=$RESELLER | jq -r .data.reseller.diskused) USED_INT=${USED%.*} ACCOUNT_IP=$(grep ^IP /var/cpanel/users/$RESELLER | cut -f 2 -d =) if [ "$USED_INT" -gt "150000" ]; then echo "$SERVER;$ACCOUNT_IP;$RESELLER;$USED_INT" fi done