Discover bad site

postcd

• May 07, 2015 06:34

someone still buying hosting for a phishing site of a bank. So i think i need some automated script to lookup cpanel accounts created in last lets say 30 days and find if any file do not contain bank name, so im notiffied and can suspend account. the person is using different IPs, banning is not solution any idea on script whichc an work on WHM server? i know how to get cpanel usernames: for i in $(ls -A1 /var/cpanel/users/ | grep -v system); do # action for one cpanel account done i know i can use this command to search in files: grep -Ril "phrasse" /home/$cpaneluser/public_html but not sure how to work only with latest cpanels so system is not unnecessarilly overloaded by these searches

• 

  cPanelMichael

  • May 07, 2015 13:40

  but not sure how to work only with latest cpanels so system is not unnecessarilly overloaded by these searches

  
  Hello, There's no change in recent versions of cPanel that will make searching through files any less or more resource intensive. Note that you may want to consult with a third-party developer if you are looking for help developing a custom script. Thank you.

  0
• 

  iso99

  • May 20, 2015 02:23

  /var/cpanel/accounting.log will show which new accounts were created

  0
• 

  postcd

  • July 07, 2015 19:53

  /var/cpanel/accounting.log will show which new accounts were created

  
  Thank You, it helped, the account name can be extracted from that file. Here is the script which does it.

  0
• 

  cPanelMichael

  • August 26, 2015 19:51

  I'm happy to see you were able to find the information you needed. Thank you for updating us with the outcome.

  0

Please sign in to leave a comment.