How to list the email login history

Question

How can I get a list of the login history of an email address?

Answer

The dovecot logs in /var/log/maillog can be searched to find a list of recent logins for a specific email address.

CPANEL_INFO: You must replace the "email@domain.tld" with the email address you are searching for.

1. Access your server using SSH as the root user.

2. Search the current Dovecot maillog. The log format depends on the Dovecot version: Dovecot 2.4 uses "Logged in:", while Dovecot 2.3 (used by cPanel & WHM version 110) uses "Login:".

   v128 and later (Dovecot 2.4)

   # grep 'Logged in: user=.*email@domain.tld' /var/log/maillog

   v110 (Dovecot 2.3)

   # grep 'Login: user=.*email@domain.tld' /var/log/maillog

3. Search the current cPanel Session log:

   # grep 'email@domain.tld' /usr/local/cpanel/logs/session_log

4. Search the current cPanel login log:

   # grep 'Logged in: user=.*email@domain.tld' /usr/local/cpanel/logs/login_log