Log in to your cPanel account.

Navigate to the Metrics section.

Click on Raw Access (or “Raw Access Logs”).

In the Configure Logs section (optional), you can:

• Check Archive log files in your home directory after the system processes statistics to keep compressed logs.

• Check Remove the previous month’s archived logs from your home directory at the end of each month if you only want to keep recent logs.

• Click Save if you made changes.

Scroll to the Download Current Raw Access Logs section. You’ll see a table listing your domains. For each domain, you can see info such as “Last Update” and “Disk Usage.”

Click the domain name you want to download. This will download a file (typically compressed as .gz) containing that domain’s log.

Save the downloaded .gz file to your computer.

Decompress/unzip the .gz file using a program such as 7‑Zip (Windows) or a decompressing tool on Mac/Linux.

Open the decompressed log file in a text editor (Notepad++, Sublime, etc.) to view its contents. Each line represents a request to your website — e.g., IP address, timestamp, requested resource, user agent.

Optionally, if your archive logs are enabled (from step 4), go to the Archived Raw Logs section and download older log files spanning previous months.