The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Viewing Successful Root Login Log

Discussion in 'General Discussion' started by danieliconica, Jul 30, 2015.

  1. danieliconica

    danieliconica Registered

    Joined:
    Jul 30, 2015
    Messages:
    2
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Toronto, Canada
    cPanel Access Level:
    Root Administrator
    Hello, is it possible to view a log of successful root logins into WHM? I looked into the login_log file. But it only seems to show failed logins.

    If that's not possible, is it possible to get an email alert whenever someone logs into WHM successfully?

    Thanks for your help!
     
  2. ModServ

    ModServ Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    332
    Likes Received:
    5
    Trophy Points:
    18
    Location:
    Egypt
    cPanel Access Level:
    Root Administrator
    Successful logins of root account to WHM can be found in access_logs:

    Code:
    grep "root" /usr/local/cpanel/logs/access_log
     
  3. danieliconica

    danieliconica Registered

    Joined:
    Jul 30, 2015
    Messages:
    2
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Toronto, Canada
    cPanel Access Level:
    Root Administrator
    Awesome, thanks!
     
    ModServ likes this.
  4. ModServ

    ModServ Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    332
    Likes Received:
    5
    Trophy Points:
    18
    Location:
    Egypt
    cPanel Access Level:
    Root Administrator
    Great, you welcome :)
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    You may also find the following option in "WHM Home >> Security Center >> cPHulk Brute Force Protection" helpful:

    "Send a notification upon successful root login when the IP address is not on the whitelist"

    Documentation on this option is available at:

    cPhulk Brute Force Protection

    Thank you.
     
Loading...

Share This Page