Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Checking Admin Access Logs

[Cathus]

I'm running Webhost Manager with cPanel on CentOS

I presume there are logs of who has done what to which on the server somewhere.

How would I find out who/when someone has accessed the WHM or cPanel control of one of my accounts, one of my mates thinks his account is being hacked.

[sirius]

* Moved to Technical and Security Issues....

Sirius

[flashwebhost]

Check the file

/usr/local/apache/logs/access_log

[logicsupport]

You can check the domain logs of each account to see what all has been accessed on a particular account.

/usr/local/apache/domlogs/domainname

You can track the time as well as the ip address from which someone tried to access an account's whm or cpanel using the above log.