Trying to rundown a timeframe as to when an email address we have was compromised and was curious if user login information (IP, location) was available in a log. Thanks!
Hello! Webmail access would be logged to /usr/local/cpanel/logs/access_log, and any email account access from a POP3/IMAP client would be logged to /var/log/maillog. Both of these logs would contain the IP address of the client(s) that accessed email accounts on the server.
| Thread starter | Similar threads | Forum | Replies | Date |
|---|---|---|---|---|
| I | WHM View Mail Statistics Summary date range | 6 | ||
|
How to view the spam IPs on WHM | 3 | ||
| P | View Relayers Under WHM | 0 | ||
| H | WHM "View Relayers" appears empty | 1 | ||
| G | WHM > View Relayers , is blank | 9 |