Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SOLVED How to find which IP deleted files from cPanel file manager

Discussion in 'General Discussion' started by Sarath Kumar R, Dec 6, 2016.

Tags:
  1. Sarath Kumar R

    Sarath Kumar R Active Member

    Joined:
    Oct 18, 2016
    Messages:
    26
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi,

    Please let me know how to find from which IP files were deleted using cpanel. Please help me with this.
     
  2. SysSachin

    SysSachin Well-Known Member

    Joined:
    Aug 23, 2015
    Messages:
    561
    Likes Received:
    40
    Trophy Points:
    28
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    You have to check cpanel logs in the file /usr/log/cpanel/logs access_log
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,419
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Yes, as mentioned, File Manager activity is logged to:

    /usr/local/cpanel/logs/access_log

    You may also want to consider voting for the following feature request:

    Built-in filemanager "transfer log"

    Thanks!
     
  4. Sarath Kumar R

    Sarath Kumar R Active Member

    Joined:
    Oct 18, 2016
    Messages:
    26
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Can you please let me know whether there is any keyword to search.

    Can you please let me know whether there is any keyword to search.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,419
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    You can search for the term "filemanager" with a command such as:

    Code:
    grep filemanager /usr/local/cpanel/logs/access_log
    However, there's no specific output to let you know if a file was deleted.

    Thank you.
     
  6. Sarath Kumar R

    Sarath Kumar R Active Member

    Joined:
    Oct 18, 2016
    Messages:
    26
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Grepping file manager won't help much so guys anyone had any other suggestion.
     
  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,419
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    You could disable File Manager for the package assigned to the account as part of a custom feature list via "WHM >> Packages >> Edit A Package" and "WHM >> Packages >> Feature Manager". This would require the users to remove files via FTP (assuming SSH access is disabled), which you could then monitor all activity via the /var/log/messages log file.

    Beyond that, I encourage you to open a feature request for advanced File Manager logging via:

    Submit A Feature Request

    Thanks!
     
Loading...

Share This Page