Mark Coates

Well-Known Member
Mar 13, 2019
98
12
8
Doncaster
cPanel Access Level
Root Administrator
Hi I was just wondering if there is a log somewhere or anyway of knowing which user's login to their cpanel account?

By this i dont mean cpanel access like email or ftp i mean physically logging into cpanel itself either through my site or using the port 2083.

Thanks :)
 

Muhammed Fasal

Well-Known Member
Aug 9, 2017
55
12
8
India
cPanel Access Level
Root Administrator
Mark,

Each cPanel account itself should have a hidden log file in its home directory there as '.lastlogin' to record the history successful logins. To get it, go to 'File Manager' interface and make the hidden files visible by going to the Settings tab from right top corner, and view the file named '.lastlogin' there. This file will log the IP address of the logged in visitor, date and time for reference.

If you have the root level SSH access, then you can run below oneliner command to see the successful logins to the cPanel/WHM accounts there:

grep "login=1&post_login=" /usr/local/cpanel/logs/access_log | awk '{print $1" : "$3" : "$4}'

The above one liner could be improved a bit more, I wrote it just now and had no time to make the output even better.
 

Ed Bergavera

Member
Sep 16, 2016
12
9
53
Panabo City, Philippines
cPanel Access Level
Root Administrator
Mark,

Each cPanel account itself should have a hidden log file in its home directory there as '.lastlogin' to record the history successful logins. To get it, go to 'File Manager' interface and make the hidden files visible by going to the Settings tab from right top corner, and view the file named '.lastlogin' there. This file will log the IP address of the logged in visitor, date and time for reference.

If you have the root level SSH access, then you can run below oneliner command to see the successful logins to the cPanel/WHM accounts there:

grep "login=1&post_login=" /usr/local/cpanel/logs/access_log | awk '{print $1" : "$3" : "$4}'

The above one liner could be improved a bit more, I wrote it just now and had no time to make the output even better.
The command really helps!
 
  • Like
Reactions: cPanelAnthony