Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED How to find which IP deleted files from cPanel file manager

Discussion in 'General Discussion' started by Sarath Kumar R, Dec 6, 2016.

Tags:
  1. Sarath Kumar R

    Sarath Kumar R Active Member

    Joined:
    Oct 18, 2016
    Messages:
    26
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi,

    Please let me know how to find from which IP files were deleted using cpanel. Please help me with this.
     
  2. SysSachin

    SysSachin Well-Known Member

    Joined:
    Aug 23, 2015
    Messages:
    604
    Likes Received:
    42
    Trophy Points:
    28
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    You have to check cpanel logs in the file /usr/log/cpanel/logs access_log
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,367
    Likes Received:
    1,857
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Yes, as mentioned, File Manager activity is logged to:

    /usr/local/cpanel/logs/access_log

    You may also want to consider voting for the following feature request:

    Built-in filemanager "transfer log"

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Sarath Kumar R

    Sarath Kumar R Active Member

    Joined:
    Oct 18, 2016
    Messages:
    26
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Can you please let me know whether there is any keyword to search.

    Can you please let me know whether there is any keyword to search.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,367
    Likes Received:
    1,857
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    You can search for the term "filemanager" with a command such as:

    Code:
    grep filemanager /usr/local/cpanel/logs/access_log
    However, there's no specific output to let you know if a file was deleted.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. Sarath Kumar R

    Sarath Kumar R Active Member

    Joined:
    Oct 18, 2016
    Messages:
    26
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Grepping file manager won't help much so guys anyone had any other suggestion.
     
  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,367
    Likes Received:
    1,857
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    You could disable File Manager for the package assigned to the account as part of a custom feature list via "WHM >> Packages >> Edit A Package" and "WHM >> Packages >> Feature Manager". This would require the users to remove files via FTP (assuming SSH access is disabled), which you could then monitor all activity via the /var/log/messages log file.

    Beyond that, I encourage you to open a feature request for advanced File Manager logging via:

    Submit A Feature Request

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice