The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

One of my accounts was comprimised, where do I find a log with SSH/FTP logins?

Discussion in 'General Discussion' started by BianchiDude, Jan 10, 2007.

  1. BianchiDude

    BianchiDude Well-Known Member
    PartnerNOC

    Joined:
    Jul 2, 2005
    Messages:
    619
    Likes Received:
    0
    Trophy Points:
    16
    One of my accounts was comprimised, where do I find a log with SSH/FTP logins?
     
  2. mctDarren

    mctDarren Well-Known Member

    Joined:
    Jan 6, 2004
    Messages:
    664
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    New Jersey
    cPanel Access Level:
    Root Administrator
    Try /var/log/secure or /var/log/messages?
     
  3. rhysmcmurdo

    rhysmcmurdo Member

    Joined:
    Apr 12, 2006
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    last

    will show you a list of users and when they last logged on (Via ssh).

    To view an older file, you can run last -f /var/log/wtmp.(Whatever you want to lookup)
     
  4. BianchiDude

    BianchiDude Well-Known Member
    PartnerNOC

    Joined:
    Jul 2, 2005
    Messages:
    619
    Likes Received:
    0
    Trophy Points:
    16
    Thanks! I found the SSH logins, where do I find the FTP logins?
     
  5. rhysmcmurdo

    rhysmcmurdo Member

    Joined:
    Apr 12, 2006
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    /var/log/messages
     
  6. FrankyKnife

    FrankyKnife Member

    Joined:
    Mar 27, 2004
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Zurich (CH)
    OMG... thx sooooo much!

    i looked for that for months now... everyone says something differerent like ftp..., xferlog..., pureftp..., aaaaaaaaaaaah! :mad:

    also inside cpanel the ftp logs are not there, only http logs.


    ...now the ftp logs are called: 'messages' :eek: :D lol
    (who should this know.. crazy world!?!)
     
Loading...

Share This Page