Question
Where can I find the cPanel log in history and access logs?
Answer
cPanel log in history is stored in /usr/local/cpanel/logs/login_log
.
Access logs are located at /usr/local/cpanel/logs/access_log
. If you are looking for rotated logs, they are at /usr/local/cpanel/logs/archive/*-MM-YYYY
where YYYY
represents the year, and MM
the month.
There are also the session logs in /usr/local/cpanel/logs/session_log
which can be used to determine which IPs accessed the account.
As an example
grep "cpuser" /usr/local/cpanel/logs/session_log|grep NEW |awk '{print $1 , $5 , $6 , $8}'