Skip to main content

cPHulk got disabled

Comments

3 comments

  • Diego Piquero
    You can look at the access log throug less /usr/local/cpanel/logs/login_log and search for root to find the IP which has tried or logged in as root
    0
  • quietFinn
    When cpHulk gets disabled you see something like this in /usr/local/cpanel/logs/cphulkd.log [2022-01-31 20:42:22 +0200] info [cPhulkd] DB processor shutdown via SIGTERM with pid 3319908 [2022-01-31 20:42:22 +0200] info [cPhulkd] processor shutdown via SIGTERM with pid 3319832
    0
  • cPRex Jurassic Moderator
    Checking the server logs as @Diego Piquero mentioned would be the best way to get more details on this. You could also check SSH access to the server with the "last" command to see if any IPs you don't recognize have been logged in. Using the log that @quietFinn mentioned would give you a good idea of the time the change was made.
    0

Please sign in to leave a comment.