Question FTP log for (failed) login attemps

[wakabayashi]

Server operating system version

Debian 12.8

Plesk version and microupdate number

18.0.65

Hello

Where do I find the ftp log for login failed attemps? Using the google/forum search lead me to this folder

/var/www/vhosts/domain.com/logs

I have files with name "xferlog_regular". But this log contains only file uploads. I don't see the login attemps itself.

To give some context: my goal is to find brut force attacks on my ftp server...

 

[wakabayashi]

I believe, that I found it. The following should output ftp login attempts

grep "proftpd" /var/log/auth.log

 

[Vladimir C.]

Hello! Yes, it's correct location. I would recommend use the following article with collection of common Plesk and services logs:

https://support.plesk.com/hc/en-us/articles/12377744787991-Plesk-for-Linux-services-logs-and-configuration-files#ftp

 

[wakabayashi]

Thanks. This overview is very helpful