I don’t know. If you’re logging into port 20000 on your Virtualmin system, assuming you haven’t changed any ports for our services, you’d be logging into Usermin, and you would see new entries appearing in the usermin miniserv.log (there is a miniserv.log for Webmin as well, they are wholly independent). I can’t think of any reason Usermin would not log to its access log.
miniserv.log doesn’t show sessions, it shows every page load. It shows a username, the page visited and the time along with status, etc.
Nobody said that. I haven’t seen anything in this conversation that indicates corruption of anything. You have a user sending spam. Please do not jump to reinstalling as a solution to any problem you run into that you don’t understand.
It looks like you’re using Virtualmin GPL. Support for our open source projects is provided here in the public forum.