One Hat Cyber Team

Your IP : 216.73.216.220

Server IP : 203.175.9.166

Server : Linux tanggamus.iixcp.rumahweb.net 5.14.0-427.28.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 2 03:44:10 EDT 2024 x86_64

Server Software : LiteSpeed

PHP Version : 7.4.33

Buat File | Buat Folder

Dir : ~/usr/local/apache/htdocs/

Edit File: remove_spammer.sh

#!/bin/bash
if [ $# -lt 1 ]; then
        echo "Usage: ./remove_spammer.sh email_address"
        exit 1
fi
email_acct=$1
domain_name=$(echo $1 | cut -d@ -f2)
#cpuser=$(grep -lR $domain_name /var/cpanel/users/ | xargs -L 1 basename)
cpuser=$(grep ... /var/cpanel/users/* | grep =$domain_name | cut -d: -f1 | head -n1 | xargs -L 1 basename)
email=$(cat /var/cpanel/users/$cpuser | grep 'CONTACTEMAIL=' | cut -d= -f2)
rand_pass=$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 13 ; echo '')
if [ -f /var/cpanel/users/$cpuser ]; then
    #ganti password
    echo "Mengubah password untuk $1..."
    /usr/bin/uapi --user=$cpuser Email passwd_pop email=$1 password=$rand_pass domain=$domain_name >> /dev/null 2>&1
    echo "Done."
    echo "Melakukan suspension Email"
    #suspend email
    /usr/bin/uapi --user=$cpuser Email suspend_login email=$1 >> /dev/null 2>&1
    /usr/bin/uapi --user=$cpuser Email hold_outgoing email=$1 >> /dev/null 2>&1
    /usr/bin/uapi --user=$cpuser Email suspend_outgoing email=$1 >> /dev/null 2>&1
    /usr/bin/uapi --user=$cpuser Email suspend_incoming email=$1  >> /dev/null 2>&1
    echo "Done."
    #remove queue
    echo "Menghapus Queue untuk $1"
    /usr/sbin/exiqgrep -i -f $1 | xargs /usr/sbin/exim -Mrm >> /dev/null 2>&1
    echo "Done."
    echo "Email account sudah diupdate.."
    if [ $(/usr/sbin/exim -bp | grep $1 | wc -l) -eq 0 ]; then
        echo "Mail queue untuk $1 sudah habis"
    else
        echo "Masih tersisa email pada mail queue:"
        /usr/sbin/exim -bp | grep $1
    fi
    #kirim notifikasi
    if [ $(/usr/bin/ping -c1 fire.omega.rumahweb.net | grep '1 received' | wc -l) -eq 1 ]; then
SERVER_API_KEY='nE2vF4oK7eT0pU4c'
API_URL='https://fire.omega.rumahweb.net'
echo '{' > /root/spam_notification
echo '"cpuser": ''"'$cpuser'",' >> /root/spam_notification
echo '"domain": ''"'$domain_name'",' >> /root/spam_notification
echo '"email_address": ''"'$1'",' >> /root/spam_notification
echo '"email": ''"'$email'"' >> /root/spam_notification
echo '}' >> /root/spam_notification
generate_post_data=$(cat /root/spam_notification)
curl -k -H "OMG-KEY:$SERVER_API_KEY" -H 'Content-Type: application/json' -X POST --data "$generate_post_data" $API_URL/api/notifications/notify_spam_acct > /root/spam_notification_response
    else
        echo "Notifikasi tidak dapat dikirimkan. Silahkan kirim secara manual."
    fi
fi