Question
Where can I find the cPanel log in history and access logs?
Answer
cPanel log in history is stored in /usr/local/cpanel/logs/login_log.
Access logs are located at /usr/local/cpanel/logs/access_log. If you are looking for rotated logs, they are at /usr/local/cpanel/logs/archive/*-MM-YYYY where YYYYrepresents the year, and MM the month.
There are also the session logs in /usr/local/cpanel/logs/session_log which can be used to determine which IPs accessed the account.
As an example
grep "cpuser" /usr/local/cpanel/logs/session_log|grep NEW |awk '{print $1 , $5 , $6 , $8}'