bt4

Well-Known Member
Jul 1, 2010
69
0
56
Hello, some sites hacked on my server i want to check log of accounts to know how this websites hacked
 

LinuxTechie

Well-Known Member
Jan 22, 2011
502
10
68
cPanel Access Level
Root Administrator
Hello,

A close look is needed for finding out the hack attempts. You can check the ftp logs : /var/log/messages , cpanel logs :/usr/local/cpanel/logs/access_log and apache logs : /usr/local/apache/logs/access_log and apache domlogs.

It is always good to a maldetect to find vulnerable files, if any.
 

cPanelTristan

Quality Assurance Analyst
Staff member
Oct 2, 2010
7,607
40
248
somewhere over the rainbow
cPanel Access Level
Root Administrator
Of note, the domlogs specifically are at /usr/local/apache/domlogs where stored by domain name and subdomain name.