
Originally Posted by
BianchiDude
Where are cpanel and WHM logins logged?
Failed and successful.
Failed authentication attempts are recorded in the login log at the following path:- Note: The file "login_log" does not include successful authentications.
Code:
/usr/local/cpanel/logs/login_log
Successful authentications are evident when referencing the access log, where all successful requests are recorded, at the following path:
Code:
/usr/local/cpanel/logs/access_log
If cPHulk is enabled via the Security Center in WHM, then the following log file may also be referenced:
Code:
/usr/local/cpanel/logs/cphulkd.log