How to find when a cPanel account was terminated/deleted

This article will help to know when a cPanel account was terminated in the server

If you need to know when a specific account was terminated to help narrow down which backup dates you have available or any other reason you can find that information in the accounting log file. The /var/cpanel/accounting.log file contains records of cPanel account actions, such as creation, deletion, and suspension.

Procedure to know when a cPanel account was terminate.

1. Access the server’s command line as the ‘root’ user via SSH or “Terminal” in WHM.
2. Use the grep command to find “REMOVE” actions for the account’s username.

[root@server ~]# grep cpusername /var/cpanel/accounting.log|grep REMOVE
Sat Sep 14 18:41:02 2024:REMOVE:root:root:domain.tld:cpusername
[root@server ~]#

Please note that cpusername must be replaced by the username of the account in question.

From the above step we can clearly know when the user account was removed with date, and time.

If you would have temp folder is full and need to clean the tmp directory in server manually click here.