check Log of accounts

[bt4]

Hello, some sites hacked on my server i want to check log of accounts to know how this websites hacked

 

[LinuxTechie]

Hello,

A close look is needed for finding out the hack attempts. You can check the ftp logs : /var/log/messages , cpanel logs :/usr/local/cpanel/logs/access_log and apache logs : /usr/local/apache/logs/access_log and apache domlogs.

It is always good to a maldetect to find vulnerable files, if any.

 

[bt4]

thanks cPtechie

 

[cPanelTristan]

Of note, the domlogs specifically are at /usr/local/apache/domlogs where stored by domain name and subdomain name.

 

[LinuxTechie]

thanks cPtechie

You are most welcome! Cheers!