Real IP in apache acces logs whm/cpanel
in /usr/local/apache/conf/includes/post_virtualhost_global.conf add
LogFormat "%{X-Forwarded-For}i %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
in /usr/local/apache/conf/includes/post_virtualhost_global.conf add
LogFormat "%{X-Forwarded-For}i %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined