Track Webmail Logins On cPanel← Back

If a user suspects unauthorised logins to their email on cPanel or you wish to perform an audit on a user, you can pull the IP, username and date/time from cPanel's access_log.
# tail -10000 /usr/local/cpanel/logs/access_log|grep "user\@domain.com"|cut -d " " -f 1-5
From that command, you will get output similar to:
4.4.4.4 - user@domain.com [06/13/2013:12:13:11 -0000]
Comments
There are no comments