The problem
Every shared server accumulates them: accounts whose owners moved on years ago. They pay nothing, hold gigabytes of backups, run WordPress versions from another era — and because nobody updates them, they are the first thing attackers compromise. The naive way to find them (“no lines in the access log”) fails, because bots and scanners hit every domain daily, so even a dead site’s log is never empty.
The solution
VpsMonitor.Pro’s zero-traffic check counts not just requests but successful (2xx) responses per account over the last week. An account with requests but zero successful responses is exactly the abandoned case: bots knock, nothing answers — typically an expired or broken domain. Genuinely silent accounts and very-low-traffic ones are flagged too, with a “lowest traffic top 15” table so you can tune the thresholds against reality.
Its sibling, the old sub-domains check, scans the web server’s own vhost configuration for leftover old. staging copies pointing into /home — forgotten clones with real document roots that nobody patches. Together they produce a concrete clean-up list: suspend, archive or delete, and reclaim the disk shown by the quota columns.
Frequently asked questions
Why is “empty access log” the wrong test for an abandoned site?
Because scanners and crawlers request every domain on the internet daily. Dead sites still log traffic — what they lack is successful 2xx responses, which is what this check measures.
Why are abandoned accounts a security problem?
They run unpatched CMSes with old plugins and forgotten admin passwords. Most server compromises start in a site nobody maintains and spread from there.
What about parked domains that intentionally serve nothing?
They appear in the review list, and intentionally parked ones are easy to recognise and skip — the goal is the “for review” shortlist, not auto-deletion.
Get a license · Download free — 7-day trial