Ok, I checked all logs in de directadmin directory that has changed today.
Directadmin was working at 15:40 because I used the webinterface to update.
So these are the last lines of the logs, all from the start of the update±
2008-Dec-23.log
23/12/2008:15:42:57 213.133.47.158 GET / HTTP/1.1 (null)
23/12/2008:15:43:02 213.133.47.158 POST /CMD_LOGIN HTTP/1.1 admin
23/12/2008:15:43:02 213.133.47.158 GET / HTTP/1.1 admin
23/12/2008:15:43:10 213.133.47.158 GET /CMD_PLUGIN_MANAGER HTTP/1.1 admin
23/12/2008:15:43:10 213.133.47.158 GET /IMG_SKIN_NAV_LOGOUT2 HTTP/1.1 admin
23/12/2008:15:43:10 213.133.47.158 GET /IMG_SKIN_GRADIENT HTTP/1.1 admin
23/12/2008:15:43:10 213.133.47.158 GET /IMG_FOOTER_WIDE HTTP/1.1 admin
23/12/2008:15:43:12 213.133.47.158 GET / HTTP/1.1 admin
23/12/2008:15:43:16 213.133.47.158 GET /CMD_SHOW_SERVICES HTTP/1.1 admin
23/12/2008:15:43:22 213.133.47.158 GET / HTTP/1.1 admin
23/12/2008:15:43:25 213.133.47.158 GET /CMD_SYSTEM_INFO HTTP/1.1 admin
23/12/2008:15:43:26 213.133.47.158 GET /IMG_SKIN_CTRL_ACCOUNT HTTP/1.1 admin
23/12/2008:15:43:56 213.133.47.158 GET / HTTP/1.1 admin
23/12/2008:15:45:10 213.133.47.158 GET /CMD_LICENSE HTTP/1.1 admin
23/12/2008:15:45:16 213.133.47.158 GET /CMD_LICENSE HTTP/1.1 admin
system.log
2008:12:23-15:46:12: Update of software successfull!
2008:12:23-15:46:12: signal TERM received. Waiting for children to exit
2008:12:23-15:46:12: Clean shutdown successful
2008:12:23-15:46:12: directadmin restarted
2008:12:23-15:46:12: directadmin started
2008:12:23-15:46:23: directadmin restarted
errortaskq.log
2008:12:23-15:46:12: service directadmin wasn't running, starting it
2008:12:23-15:46:22: service directadmin didn't start, re-starting it
error.log
2008:12:21-17:33:34: Error reading from 82.170.180.218: