grep -r "eval(base64_decode(" /home/*/domains/*/public_html > /root/base64-2.txt
Search log files for most loaded files:
awk '/POST|GET/{print FILENAME " " $7}' /var/log/httpd/domains/*.log | sed 's/?.*//' | sort | uniq -c | sort -nr | less
Clear above logfiles:
truncate /var/log/httpd/domains/*.log --size 0
Check service status:
service --status-all