Yeah, no luck there. We had already perused most of all of the logs and didn't find anything. In this case, WHMCS suspended an account for nonpayment and the SM provided WHMCS module disabled the account, or at least that's what we think. The client paid their bill online through WHMCS, which we presume, re-enabled the account. We can see the activity on the WHMCS side, but can't see if it actually disabled the account and re-enabled it on the SM side.