The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Is there a failed login attempt log?

Discussion in 'Security' started by nanobug, Jan 4, 2012.

  1. nanobug

    nanobug Registered

    Joined:
    Jan 4, 2012
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    51
    cPanel Access Level:
    Root Administrator
    Is there a failed login attempt log stored somewhere other than cPHulk's database?
     
  2. ruzbehraja

    ruzbehraja Well-Known Member

    Joined:
    May 19, 2011
    Messages:
    392
    Likes Received:
    11
    Trophy Points:
    68
    cPanel Access Level:
    Root Administrator
    http://www.cpanel.net/images/loglocationsposter.jpg

    That link should be able to give you the exact information you are searching for, dependent on the service.
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,287
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello :)

    Yes, failed login attempts to cPanel/WHM are logged to the following log file:

    Code:
    /usr/local/cpanel/logs/login_log
    Thank you.
     
  4. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,622
    Likes Received:
    25
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Are these only cPanel or WHM login attempts or logins for something else like IMAP/POP3, sshd, etc.?
     
  5. nanobug

    nanobug Registered

    Joined:
    Jan 4, 2012
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    51
    cPanel Access Level:
    Root Administrator
    Thank you cPanelMichael, that's exactly what I'm looking for. :D

    cPanelTristan, I just typed the wrong password for SSH on purpose, and it does not show up in the log. However, cPanel/WHM attempts show up, deferred logins show up, and web mail... That's all I see in my logs, there may be more.
     
  6. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,622
    Likes Received:
    25
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    For sshd, you'd find those login attempts at /var/log/messages location.
     
Loading...

Share This Page