cPanel User Login Logging?

[Mark Coates]

Hi I was just wondering if there is a log somewhere or anyway of knowing which user's login to their cpanel account?

By this i dont mean cpanel access like email or ftp i mean physically logging into cpanel itself either through my site or using the port 2083.

Thanks

 

[Muhammed Fasal]

Mark,

Each cPanel account itself should have a hidden log file in its home directory there as '.lastlogin' to record the history successful logins. To get it, go to 'File Manager' interface and make the hidden files visible by going to the Settings tab from right top corner, and view the file named '.lastlogin' there. This file will log the IP address of the logged in visitor, date and time for reference.

If you have the root level SSH access, then you can run below oneliner command to see the successful logins to the cPanel/WHM accounts there:

grep "login=1&post_login=" /usr/local/cpanel/logs/access_log | awk '{print $1" : "$3" : "$4}'

The above one liner could be improved a bit more, I wrote it just now and had no time to make the output even better.

 

[Mark Coates]

Thanks

 

[cPanelLauren]

Thanks @Muhammed Fasal for the awesome response and help!

 

[Muhammed Fasal]

Most welcome guys @Mark Coates @cPanelLauren

 

[Ed Bergavera]

Mark,

Each cPanel account itself should have a hidden log file in its home directory there as '.lastlogin' to record the history successful logins. To get it, go to 'File Manager' interface and make the hidden files visible by going to the Settings tab from right top corner, and view the file named '.lastlogin' there. This file will log the IP address of the logged in visitor, date and time for reference.

If you have the root level SSH access, then you can run below oneliner command to see the successful logins to the cPanel/WHM accounts there:

grep "login=1&post_login=" /usr/local/cpanel/logs/access_log | awk '{print $1" : "$3" : "$4}'

The above one liner could be improved a bit more, I wrote it just now and had no time to make the output even better.

The command really helps!

 

[cPanelAnthony]

Hello. I'm happy this post helped you!