/etc/ips ==> ip address

/etc/reservedips =====> reserved ips

/etc/ipaddrpool ===> ip address pool
/home/user/.accesshash OR /root/.acesshash ===>Access Hash (WHM remote
access key)
/etc/cpupdate.conf ==>cpanel update preferances
/etc/wwwacct.conf ===> Basic/cpanel setup
/etc/localaliases ===> system mail preferences
/etc/alwaysrelay ===> Exim open relay list
/etc/localdomains ===> Exim related file . all domain should be listed
here to be able to send mails
/etc/remotedomains ==> list doamin that have account on the server but
send /receive mails through their own mail server
/etc/userdomains ===> user and their domains
/etc/domainusers ==> users and their main domains
/etc/trueuserdomains ==> user and their main domains
/etc/trueuserowners ==> users and their owners
/etc/domainips ===> doamin with dedicated ip
/etc/nameserverips == > nameserver ips
/etc/valiases/domain.tld ==> catchall and forwarders are set here
/var/cpanel/maxmailsperhour ==> server-wide mx mails per hour
/var/cpanel/cpanel.config ==> tweak setting
for update tweak setting run script:
# /usr/local/cpanel/whostmgr/bin/whostmgr2 updatetweaksettings
/var/cpanel/packages/ ===> cpanel packages
/var/cpanel/features/ === cpanel features
/var/cpanel/users/ and /var/cpanel/userdata/ ==>User data
/var/cpanel/templates/apache(1,2) ==> apache templates
/etc/exim.conf.localopts ==> exim config templates
/etc/mailips ===> exim mail IP
/etc/mail_reverse_dns ==> rDNS for mail IP
/var/cpanel/cluster/root/config ==> clustering
/etc/chkserv.d/ ===> service manager
/etc/cpupdate.conf ===>update config
/etc/cpbackup.conf ===> backup configuration
/var/cpanel/mainip ===> cpanel main ip
/usr/local/cpanel/version ===> cpanel version
/var/cpanel/resellers ===> resellers
/home/user/.accesshash or /root/.accesshash ===> Access hash (WHM remote
access key
/etc/localaliases ==>System mail preferences
/etc/alwaysrelay ===> Exim open relay list
/var/cpanel/cluster/root/config ==> Clusterring
/var/cpanel/resellers-nameservers ===> resellers nameservers
****common scripts are ****
/scripts/build_maxmails_config ==> sets limits on the amount of email
that users can send from domains on your server
/scripts/esyapache ==> upgrade and reinstalls apache.
/scrtips/phpextensionmgr ===> manages php extensions
*****UPDATE scripts ******
/scripts/*up
badminup==bandmin application
courierup == courier mail server
cpaddonsup== cpanels addon scripts
dovecotup = dovecot mail server
eximup == Exim mail exchanger
ftpup == ftp server (pro and pureftp )
imapup == Imap mail server
mysqlup -mysql service
nsdup == bind nameserver
phpup == current version of php
suphpup == suphp tool for hadling php requests
/scripts/upcp == update cpanel and whm
/scripts/updateuserdomains == update userdomain entries
/scritps/portup ==update ports
/scripts/runweblogs== update statistics for a user
/scripts/runstatsonce = update statistics for all users
/scripts/restartsrv_* == restart all services

Cpanel backup :
/usr/local/cpanel/logs/cpbackup

For the NEW cPanel Backup System

/usr/local/cpanel/bin/backup
Force cPanel to perform a new backup even if backup shows up-to-date
/usr/local/cpanel/bin/backup --force
For cPanel Legacy backup system
/usr/local/cpanel/scripts/cpbackup

Force cPanel to perform a new backup

/usr/local/cpanel/scripts/cpbackup --force

To change the theme for all the accounts in the whm

replace "RS=rvskin" "RS=paper_lantern" -- ./*
=============
URL:

http://www.inmotionhosting.com/support/website/getting-started-guides/
cpanel-logs-for-access-apache-email-error-ftp-mysql-whm

To suspend an account:

# /scripts/suspendacct <username>
To unsuspend an account:
# /scripts/unsuspendacct <username>
cPanel logs

-> Access logs and user actions

/usr/local/cpanel/logs/access_log

-> Backup logs

/usr/local/cpanel/logs/cpbackup
-> Brute force protection (cphulkd) log
/usr/local/cpanel/logs/cphulkd.log
-> Cpanel dns admin dns clustering daemon
/usr/local/cpanel/logs/dnsadmin_log

-> Cpanel taskqueue processing daemon

/usr/local/cpanel/logs/queueprocd.log
-> DBmapping
/usr/local/cpanel/logs/setupdbmap_log

-> EasyApache build logs

/usr/local/cpanel/logs/easy/apache/
-> Error log
/usr/local/cpanel/logs/error_log

-> License updates and errors

/usr/local/cpanel/logs/license_log

-> Locale database modifications

/usr/local/cpanel/logs/build_locale_database_log

-> Login errors (CPSRVD)

/usr/local/cpanel/logs/login_log
-> Panic log
/usr/local/cpanel/logs/panic_log
> WebDisk (CPDAVD)
/usr/local/cpanel/logs/cpdavd_error_log

-> Website statistics log

/usr/local/cpanel/logs/stats_log

-> Tailwatch driver tailwatchd log

/usr/local/cpanel/logs/tailwatch_log
-> Update analysis reporting
/usr/local/cpanel/logs/updated_analysis/{TIMESTAMP}.log

================================
-> Horde
/var/cpanel/horde/log/
-> RoundCube
/var/cpanel/roundcube/log/

-> SquirrelMail
/var/cpanel/squirrelmail/log/

================================

-> Account transfers and misc. logs

/var/cpanel/logs
-> Auditing log (account creations, deletions, etc)
/var/cpanel/accounting.log

================================
-> Per account bandwidth history (Cached)
/var/cpanel/bandwidth.cache/{USERNAME}
-> Per account bandwidth history (Human Readable)
/var/cpanel/bandwidth/{USERNAME}

================================

-> Update (UPCP) log

/var/cpanel/updatelogs/updated.{TIMESTAMP}.log
-> Service status logs
/var/log/chkservd.log

-> Installation log

/var/log/cpanel
================================

cPanel access log

-> Access logs and user actions
/usr/local/cpanel/logs/access_log

cPanel apache log

-> Apache restarts done through cPanel and WHM

usr/local/cpanel/logs/safeapcherestart_log

-> Domain access logs

/usr/local/apache/domlogs/{DOMAIN}
-> Processing of log splitting
/usr/local/cpanel/logs/splitlogs_log

-> suPHP audit log

/usr/local/apache/logs/suphp_log
-> Web server and CGI application error log
/usr/local/apache/logs/error_log

cPanel email log

-> Delivery and receipt log

/var/log/exim_mainlog
-> Incoming mail queue
/var/spool/exim/input/

-> Log of messages rejected based on ACLS or other policies

/var/log/exim_rejectlog

-> Unexpected/Fatal error log

/var/log/exim_paniclog
-> IMAP, POP login attempts, transactions, fatal errors and spam scoring
/var/log/maillog
/var/log/messages
-> Mailman
/usr/local/cpanel/3rdparty/mailmain/logs

MySQL log
-> MySQL error log
/var/lib/mysql/{SERVER_NAME}.err
-> MySQL slow query log (if enabled in my.cnf)
/var/log/slowqueries