Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Help tracking down a hacker .. where to view Cpanel login IP's?

Discussion in 'General Discussion' started by listenmirndt, Aug 2, 2007.

  1. listenmirndt

    listenmirndt Member

    Joined:
    Jul 14, 2004
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    151
    Hi guys,

    A hacker recently logged into my Cpanel & stole some of my database's..

    Anyhow, is there a way to view a list of recent Cpanel logins to my account? Also, is it possible to login to Cpanel using a proxy? (I mean, if I can find his IP - I would like to know if it is real or not).

    I am the root owner of the server, but the hacker did not have root access, only access to one of my accounts, he got in with a stolen password,

    thanks
     
  2. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,216
    Likes Received:
    10
    Trophy Points:
    313
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Here are some log files you may find useful:

    /usr/local/cpanel/logs/error_log
    /usr/local/cpanel/logs/access_log
    /usr/local/cpanel/logs/login_log

    Their names are fairly self-descriptive.

    As for can you access cPanel via a Proxy - yes, there's a popular third party open source program called cPanel Proxy that allows users to access cPanel on port 80, but it could be used as a proxy for illegitimate purposes such as this.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice