Tatsumi Crew - File Manager

Current Directory

/opt/sharedrads

Type	Name	Operations
	__pycache__ Open
	account_review Open
	autosuspend Open
	check_software_mods Open
	cms_tools Open
	domainchecker Open
	etc Open
	extras Open
	failsuspend Open
	guds_modules Open
	mailers Open
	mitigatord Open
	mysql Open
	nlp_scripts Open
	oldrads Open
	ops Open
	perl Open
	python Open
	suspended Open
	temporary Open
	README	Edit Get
	account-review	Edit Get
	alp.py	Edit Get
	autossl_runner.sh	Edit Get
	autosusprunner.sh	Edit Get
	backup_scan.sh	Edit Get
	blockip	Edit Get
	check_apache	Edit Get
	check_autossl	Edit Get
	check_bandwidth	Edit Get
	check_boxtrapper	Edit Get
	check_cpu	Edit Get
	check_crons	Edit Get
	check_darkmailer.py	Edit Get
	check_dcpumon	Edit Get
	check_dns	Edit Get
	check_domcount.sh	Edit Get
	check_exim	Edit Get
	check_hacks	Edit Get
	check_imap	Edit Get
	check_io	Edit Get
	check_lve	Edit Get
	check_mailchannels_dns	Edit Get
	check_max_children	Edit Get
	check_mem	Edit Get
	check_misc	Edit Get
	check_mysql	Edit Get
	check_pacct	Edit Get
	check_pop3	Edit Get
	check_raid	Edit Get
	check_server	Edit Get
	check_size	Edit Get
	check_software	Edit Get
	check_spamd	Edit Get
	check_traffic	Edit Get
	check_user	Edit Get
	check_zoneh	Edit Get
	clean_exim.py	Edit Get
	clean_moveuser	Edit Get
	cms_counter.py	Edit Get
	cms_creds	Edit Get
	cms_dumpdb	Edit Get
	cms_pw	Edit Get
	cmspass.py	Edit Get
	cpanel-api	Edit Get
	cpumon	Edit Get
	ctrl_alt_del	Edit Get
	dcpumon.pl	Edit Get
	disk_cleanup.py	Edit Get
	dns-sync	Edit Get
	docroot.py	Edit Get
	du-tree	Edit Get
	envinfo.py	Edit Get
	exclude_rbl.py	Edit Get
	exclude_sender	Edit Get
	extract-vhost	Edit Get
	find_warez	Edit Get
	findbadscripts	Edit Get
	fixwpcron.py	Edit Get
	forensic.py	Edit Get
	fraudhunter.py	Edit Get
	generate_cpmove_tix	Edit Get
	hostsfilemods	Edit Get
	imap_io	Edit Get
	killall911	Edit Get
	lastcommcache.sh	Edit Get
	legal_lock_down.sh	Edit Get
	lil-cpanel	Edit Get
	limit_bots	Edit Get
	listacct	Edit Get
	mail_sources.py	Edit Get
	mailscan	Edit Get
	mass_arp_fixer.py	Edit Get
	mass_mysql_recover.py	Edit Get
	megaclisas-status	Edit Get
	modify-account	Edit Get
	modsec_disable.py	Edit Get
	move_generator.py	Edit Get
	msp.pl	Edit Get
	mysql_dstat	Edit Get
	nlp	Edit Get
	packandgo	Edit Get
	pastebin	Edit Get
	postmortem	Edit Get
	procscrape	Edit Get
	quarantine	Edit Get
	quick_post	Edit Get
	radsfunctions.sh	Edit Get
	reap_fpm_orphans.sh	Edit Get
	recent-cp	Edit Get
	reclaim_suspensions	Edit Get
	remote_dump	Edit Get
	rescp.sh	Edit Get
	reset_cpanel	Edit Get
	reset_email	Edit Get
	rotate_ip_addresses.py	Edit Get
	rrdtooldisable.sh	Edit Get
	rrdtoolenable.sh	Edit Get
	sadatarunner.sh	Edit Get
	send_customer_str	Edit Get
	send_pp_email	Edit Get
	server-load	Edit Get
	setmaxemails	Edit Get
	show-conns	Edit Get
	software_report.py	Edit Get
	sqltop	Edit Get
	strmailer	Edit Get
	suspend_domain	Edit Get
	suspend_user	Edit Get
	temp_apache_fix	Edit Get
	unsuspend_user	Edit Get
	unsusprunner.sh	Edit Get
	update_spf	Edit Get
	upgrade-check	Edit Get
	vhost_data.py	Edit Get

File Transfer

Upload files to current directory

File Editor: `check_imap`

#!/bin/bash

LINESDEF="120000";
LINES=$LINESDEF
if [ $# -eq 3 ] && [ "$2" == "--lines" ];
then
        LINES=$3;
        #echo $LINES;
fi
#echo $LINES
function printUsage () {
	echo "This script will check /var/log/maillog and active running processes for imap related activity."

        echo =Check Mailbox Usage Info=
	echo;echo "$0 --topio"
	echo "Will show a list of emails with bytes sent and received"

	echo;echo "$0 --userconns"
	echo "Show a sorted list of active imap processes per user";echo;

	echo;echo "$0 --mailbox"
	echo "Show a sorted list of active imap processes, sorted per mailbox";echo;

	echo;echo "$0 --mboxsize"
	echo "Show the size of the mailbox for all connected accounts.";
	echo "(could drive the load and take some time - use with care)";echo;

	echo =Check Basic Login Info=
        echo;echo "$0 --login_email"
        echo "Prints the email addresses with the most logins.";echo;

        echo;echo "$0 --login_ip"
        echo "Prints the IP addresses with the most logins.";echo;

        echo;echo "$0 --login_failed"
        echo "Prints highest number of failed logins by IP, address, and the both Address and IP.";echo;

        echo;echo "$0 --option --lines NUMLINES"
        echo "This will execute the option, checking NUMLINES back throgh the log file (default is ${LINESDEF})"

	echo;echo "$0 --checkerror";
	echo "Checks to see if you are hitting the maximum number allowed connections";
	echo "(Use this if you get complaints of pop timing out or being slow to connect!)";

	echo;echo "$0 --help"
	echo "You're looking at it!"
}
case $1 in
--topio)
	tail -${LINES-45000} /var/log/maillog |awk '
	/LOGOUT/ && /imapd/ && /user=/{

	 gsub(/rcvd=/,"",$11);
	 gsub(/sent=/,"",$12);
	 rcvd[$7]=rcvd[$7]+$11
	 sent[$7]=sent[$7]+$12
	}
	/LOGOUT/ && /pop3d/ && /user=/{
	 gsub(/sent=/,"",$13);
	 gsub(/rcvd=/,"",$12);
	 sent[$7]=sent[$7]+$13
	 rcvd[$7]=rcvd[$7]+$12

	}
	END{
			for (key in sent) {
					printf "%-80s %-10s %-10s\n",key,sent[key],rcvd[key];
			}
	}'
	;;
--userconns)
	ps auwx | grep imapd | awk '{if ($1 ~ /[a-z]+[0-9]+/){print $1}; }' | sort | uniq -c | sort -nk1
	;;

--mailbox)
	ps auwx | grep imapd | awk '{if ($1 ~ /[a-z]+[0-9]+/){print $12}; }'  | sort |uniq -c | sort -nk1
	;;

--mboxsize)
	echo "this may take awhile - hit control-C to exit at any time"
	for account in $(ps axuw |
                         grep "/usr/lib/courier-imap/bin/imapd /home/" |
                         grep -v root | awk '{ print $12 }'|sort | uniq);
		do
			du -h --max-depth=0 $account/cur;
		done
	;;
--login_ip)
        tail -${LINES-45000} /var/log/maillog | grep imapd | awk '{print $8}' | sed -e '/^$/d' | sort | uniq -c | sort -nk1
        ;;

--login_email)
        tail -${LINES-45000} /var/log/maillog | grep imapd | awk '/LOGIN/{print $7}' | sort | uniq -c | sort -nk1 | tail -2
        ;;

--login_failed)
        echo "=Sorted by IP="
        tail -${LINES-45000} /var/log/maillog | grep imapd |awk '/LOGIN FAILED/{print $9 }' | sort | uniq -c | sort -nk1 | tail -15
        echo "=Sorted by Address="
        tail -${LINES-45000} /var/log/maillog | grep imapd | awk '/LOGIN FAILED/{print $8 }' | sort | uniq -c | sort -nk1 | tail -15
        echo "=Sorted by Address and IP="
        tail -${LINES-45000} /var/log/maillog | grep imapd | awk '/LOGIN FAILED/{print $8, $9}' | sort | uniq -c | sort -nk1 | tail -15
        ;;
--checkerror)
	tail -${LINES-45000} /var/log/maillog |grep "maximum active connections";
	;;
--help)
	printUsage;
	exit 0
	;;
*)
	printUsage;
	exit 1
	;;
esac

Current Directory

File Transfer

File Editor: check_imap

File Editor: `check_imap`