The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Finding deleted folders in the log

Discussion in 'General Discussion' started by nanrector, Dec 15, 2014.

  1. nanrector

    nanrector Registered

    Joined:
    Dec 15, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Hot Springs, Arkansas, United States
    cPanel Access Level:
    Website Owner
    Hello!

    I've had a wordpress theme folder deleted from a web site server and I'm trying to figure out when it happened so we can determine who may have done it. I've found the log files in the cpanel File Manager and the theme shows up for the last time at 10:01pm last night. However I have no idea what the entries mean. Is there a easy way for me to tell when a folder was deleted?

    The theme was called flycase. Here is the last entry that references it:

    157.55.39.126 - - [14/Dec/2014:20:01:02 -0600] "GET /wordpress/wp-content/themes/flycase/js/jquery.swipebox.min.js?ver=1.2.1 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"

    Appreciate any input.

    Nancy
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,689
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  3. nanrector

    nanrector Registered

    Joined:
    Dec 15, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Hot Springs, Arkansas, United States
    cPanel Access Level:
    Website Owner
    I'm not quite sure what root access means. My domain is hosted with a company.


     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,689
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    I suggest reporting this issue to your web hosting provider so they can take a closer look at the Apache/FTP/cPanel logs to see if they can determine how this happened.

    Thank you.
     
  5. nanrector

    nanrector Registered

    Joined:
    Dec 15, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Hot Springs, Arkansas, United States
    cPanel Access Level:
    Website Owner
    I have contacted them. Unfortunately they said they could not see where it was deleted. Very poor hosting company. I did see in the raw logs that the wordpress login was accessed every second of a full day. Thousands and thousands of attempts. This was the day before I see the theme missing. So they obviously got in. I just can't see where it shows it was deleted. Or what would be the purpose. I've added a security plugin to prevent that in the future.
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,689
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  7. nanrector

    nanrector Registered

    Joined:
    Dec 15, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Hot Springs, Arkansas, United States
    cPanel Access Level:
    Website Owner
Loading...

Share This Page