Hi,
I have a file named hacker_cleanup.log on the logs folder. Any idea on what this is?
Have it in a few cwp servers but some don't have it.
That's a remnant of the CWP hacker cleanup script. It is perfectly normal and would be good to review those logs to make sure your server is successfully cleaned. I would be more concerned about its absence -- are those other servers up to date and clean of any IOC?