Log file for FTP accounts managment
Hello,
Is there a log file where I can find what FTP accounts were created and deleted on a cPanel account? We're using Pure-FTPd server, and I've root access.
Thanks!
-
Hey there! Yes, this is something that gets logged in the main cPanel access log at /usr/local/cpanel/logs/access_log. Here is what the log entry looks like when you create an FTP account:
1.2.3.4 - username [10/07/2024:14:05:16 -0000] "GET /cpsess5841155327/execute/Ftp/add_ftp?user=ftptest2&domain=domain.com&pass=__HIDDEN__&homedir=domain.com%2Fftptest2&disallowdot=0&cache_fix=1728309934489 HTTP/1.1" 200 0 "https://1.2.3.4:2083/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0" "s" "-" 2083
and here is the removal entry:
1.2.3.4 - username [10/07/2024:14:08:12 -0000] "GET /cpsess5841155327/execute/Ftp/delete_ftp?user=ftptest2%domain.com&destroy=1&cache_fix=1728310092202 HTTP/1.1" 200 0 "https://1.2.3.4:2083/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0" "s" "-" 2083
Basically you want to look for "add_ftp" and "delete_ftp" in the log to find those actions taken in the interface.
Let me know if that helps!
0 -
Thank you!
0 -
You're very welcome!
0
Please sign in to leave a comment.
Comments
3 comments