The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

I deleted few folders and now my mails are down and not working

Discussion in 'General Discussion' started by kostianev, Dec 28, 2015.

  1. kostianev

    kostianev Registered

    Joined:
    Dec 28, 2015
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Bulgaria
    cPanel Access Level:
    Website Owner
    Hi, I have trouble with my server - one of my account has exploit and send about 200 000 emails from this account. After that, the server run out of space because of the logs and exim database. I deleted few folders and now have problems with some services. I can't run:

    cpanellogd
    exim
    ftpd
    imap

    All my accounts can't receive and send emails. I attach the screenshot of service status. Please, can someone help me to repair my cPanel.
     

    Attached Files:

  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    671
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  3. kostianev

    kostianev Registered

    Joined:
    Dec 28, 2015
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Bulgaria
    cPanel Access Level:
    Website Owner
    Hi, I can't remember which Folders was, but it was folders (4-5 folders) from Logs and Exim.
    Also I receive emails every hour like this:


    Code:
    
    The service “cpanellogd” appears to be down.
    Number of Restart Attempts 151
    
    ==> cPanel Log Daemon version 26.0
    Failed to open(>> ): No such file or directory at /usr/local/cpanel/Cpanel/Logd/StatsLog.pm line 85.
    Can't call method "redirect_fh_to_me" on an undefined value at /usr/local/cpanel/libexec/cpanellogd line 134.
    Code:
    
    Reason TCP Transaction Log: 
    << 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
    << 
    << 
    << 
    << 
    << 
    >> USER __cpanel__service__auth__ftpd__dL2hr8QeOcjczP8HUyi2blSBT1_vJ7BHIXFzbhTSbD4q7uAblF2t6olN_FLdxSNQ
    << 331 User __cpanel__service__auth__ftpd__dL2hr8QeOcjczP8HUyi2blSBT1_vJ7BHIXFzbhTSbD4q7uAblF2t6olN_FLdxSNQ OK. Password required
    >> PASS dPD8HSqxBEXySTcuALzuB1tSX_HgoH_GQJnJXlVRMbKCEIbOKuQGL46Eylp7wG9g
    << 530 Login authentication failed
    ftpd: ** [530 Login authentication failed != 2]
    : Died
    Number of Restart Attempts 87
    Service Check Raw Output The 'pureftpd' service passed the check.
    Startup Log Starting pure-config.pl: [60G[ [0;32m OK [0;39m] 
    Starting pure-authd:
    Log Messages Dec 29 01:26:22 apollo pure-ftpd: (?@127.0.0.1) [INFO] Logout.
    Dec 29 01:26:07 apollo pure-ftpd: (?@127.0.0.1) [WARNING] Authentication failed for user [__cpanel__service__auth__ftpd__dL2hr8QeOcjczP8HUyi2blSBT1_vJ7BHIXFzbhTSbD4q7uAblF2t6olN_FLdxSNQ]
    Dec 29 01:26:02 apollo pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
    Dec 29 01:21:20 apollo pure-ftpd: (?@127.0.0.1) [INFO] Logout.
    Dec 29 01:21:05 apollo pure-ftpd: (?@127.0.0.1) [WARNING] Authentication failed for user [__cpanel__service__auth__ftpd__IJRWN6QJn8uyYxXURMz4Kmn7XpnZRJ3_cDiW0DQBXsJseAXxBdjo_NRr5zM2zUWG]
    
     
  4. SysSachin

    SysSachin Well-Known Member

    Joined:
    Aug 23, 2015
    Messages:
    326
    Likes Received:
    24
    Trophy Points:
    18
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,
    You have deleted folder by accessing server through SSH ? If yes then you can run history command to check which folders you have deleted.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    671
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    You can try forcing an update of cPanel via:

    Code:
    /scripts/upcp --force
    However, depending on which directories you removed, it's possible you will need to backup the accounts and data to a remote destination and restore them after reinstalling the OS/cPanel. You can review /root/.bash_history or use the "history" command to
    let us know which command you used to delete the directories.

    Thank you.
     
  6. Zaheer Ahmad Khan

    Joined:
    Sep 28, 2015
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Pakistan
    cPanel Access Level:
    Root Administrator
    In case you used rm (and/or rm -rf) for deleting files, may you post the output of following command
    history | grep rm
    Kind Regards
     
  7. kostianev

    kostianev Registered

    Joined:
    Dec 28, 2015
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Bulgaria
    cPanel Access Level:
    Website Owner
    When I type this command, there is only service restart and status items, I deleted fileds and folders by NCDU commands. How to get the history of this NCDU?
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    671
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Were you able to force an update of cPanel as suggested in my previous response? You may not be able to review the NCDU activity, depending on how it's configured on your server.

    Thank you.
     
Loading...

Share This Page