It is a good idea and one I've looked into a few times. Unfortunately, cPanel doesn't actually log logins to WHM, only the local httpd page views in /usr/local/cpanel/logs/access_log which don't provide any discerning information for a login. They really ought to log it to login_log
chirpy wrote:It is a good idea and one I've looked into a few times. Unfortunately, cPanel doesn't actually log logins to WHM, only the local httpd page views in /usr/local/cpanel/logs/access_log which don't provide any discerning information for a login. They really ought to log it to login_log
As far as I'm aware cPHulk has brute force protection for WHM, I will have a dig around when I have a mo and see if cPHulk logs anything useful