Log of all bash commands run by a user

.bash_history (root of user's directory)

Access_log records all requests processed by server


Error_log Apache errors and CGI debug info


Exim_mainlog Anytime message received or delivered


Exim_rejectlog message rejected based on ACLs or other


Exim_paniclog all “other” entries (should be empty)


Cron all cron processes that get run on the server


Messages ftp and other system logs


Ddomain logs Access logs for individual domains


Maillog all pop/imap login/out and spamassassin


Ftpxferlog history of transactions made by FTP

(rotates out to /var/log/)

cPanel Logs also can be found in local folders for each user's account. Some other root-level cPanel logs are:

access_log /usr/local/cpanel/logs/ request URI information
login_log /usr/local/cpanel/logs/ shows failed login messages
error_log /usr/local/cpanel/logs/ general cpanel errors
license_log /usr/local/cpanel/logs/ shows license updates/authentication
stats_log /usr/local/cpanel/logs/ shows when stats completed for user
(Awstats, Webalizer, Analog)
chkservd.log /var/log/ failed services show [-] complete [+]


tail -f /usr/local/apache/logs/error_log | grep [[IP Address of Account]]