Sunday, September 17, 2023

Find WHM/cPanel or linux failed email login log



Webmail Login attempt:


/usr/local/cpanel/logs/login_log

cp /usr/local/cpanel/logs/login_log /home/cpanel_unsername

chmod 644  /home/cpanel_unsername/ogin_log


POP3 login attempts:


/var/log/maillog

cp /usr/local/cpanel/logs/maillog /home/cpanel_unsername

chmod 644  /home/cpanel_unsername/maillog

No comments:

Post a Comment

Linux command to find user who failed to login from pop/imap

 journalctl -u dovecot -g "auth failed" grep -i "auth failed" /var/log/mail.log | grep -E "imap|pop" journalct...