1) Backup download

–>> rsync -av –progress –rsh=”ssh -l 3ixteam” star/ 66.7.205.226:star/

2) To block 25 port by IP

–>>

root@server [~]# cat test
netstat -n -p|grep 25|awk ‘{print $5}’|awk -F: ‘{print $1}’|sort|uniq|awk ‘{print “csf -d ” $1″/24″}’
root@server [~]#
3) To check pl file on the server(usernname)

–>>

tail -f /var/log/messages | grep ftp | grep *.pl

4) TO CHECK THE DISK SPACE

find -name ‘.pureftpd-upload*’ | xargs rm –f >> Delete file from user’s home folder

find -name ‘.pureftpd-upload*’ |awk ‘{print “rm -rf ” $9}’ >> Print Output from user’s home folder
find /home -type f -name ‘.pureftpd-upload*’ >> Checkes halfway uploaded files on server

find /home -type f -name ‘.pureftpd-upload*’ | xargs rm -f >> finds halfway uploaded files to server and deletes the files.

find /home -type f -name ‘.pureftpd-upload*’ |awk ‘{print “rm -rf ” $9}’ >> Prints output
ll |grep nobody |awk ‘{print “rm -rf ” $9}’ >> to delete nobody files from /tmp

find /tmp -type f -name ‘sess_*’ | xargs rm –f >> to delete session files.

ps -auxf |grep $1|awk ‘{print “kill -9 ” $2}’ >> Killwhom

Exim Spam : egrep “X-PHP-Script” * -R

The following is how to secure your /tmp directory on your Dedicated Server using a cPanel Script.
You MUST have cPanel installed for this to work.

1. Login to your server as root via SSH.
2. Type: /scripts/securetmp

That’s it your done. cPanel wrote that script to allow users to secure their /TMP Directory very easily.

The timezone is set by the file /etc/localtime. In order to set this up corectly on your Dedicated Server you will need to first remove /etc/localtime and
then create a symlink to the correct zonefile in /usr/share/zoneinfo. You will then want to run ntpdate to sync up properly.

cd /etc
rm -rf localtime
ln -s /usr/share/zoneinfo/America/New_York localtime
ntpdate -b ntp.carohosting.com

Just replace “America/New_York” with whatever timezone file you want in /usr/share/zoneinfo.

Keeping track of who logs into your Dedicated Server and when is very important, especially when you’re dealing with the super user account. We recommend that you use an email address not hosted on the server your sending the alert from.

So lets get started!

1. Login to your server and su to root.

2. cd /root

3. vi .bashrc

4. Scroll to the end of the file then add the following:
echo ‘ALERT – Root Shell Access (YourserverName) on:’ `date` `who` | mail -s “Alert: Root Access from `who | cut -d'(‘ -f2 | cut -d’)’ -f1`” you@yourdomain.com

Replace YourServerName with the handle for your actual server
Replace you@yourdomain.com with your actual email address

5. Save and exit vi (:wq)

Now logout of SSH, close the connection and log back in! You should receive an email address of the root login alert a few minutes afterwards.

Note: This is a great tool for Dedicated Servers that have multiple admins or if you give someone SSH access for whatever reason, although you should give out the root password to as few people as humanly possible and be sure to change it often.