Where are cpanel and WHM logins logged?

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Where are cpanel and WHM logins logged?

Failed and successful.
Failed authentication attempts are recorded in the login log at the following path:
  • Note: The file "login_log" does not include successful authentications.
Code:
/usr/local/cpanel/logs/login_log
Successful authentications are evident when referencing the access log, where all successful requests are recorded, at the following path:
Code:
/usr/local/cpanel/logs/access_log
If cPHulk is enabled via the Security Center in WHM, then the following log file may also be referenced:
Code:
/usr/local/cpanel/logs/cphulkd.log