diff --git a/acquire/acquire.py b/acquire/acquire.py
index 3f754a82..7cb51deb 100644
--- a/acquire/acquire.py
+++ b/acquire/acquire.py
@@ -1282,6 +1282,16 @@ class RemoteAccess(Module):
     ]
 
 
+@register_module("--webhosting")
+class WebHosting(Module):
+    DESC = "Web hosting software log files"
+    SPEC = [
+        # cPanel
+        ("dir", "/usr/local/cpanel/logs"),
+        ("file", ".lastlogin", from_user_home),
+    ]
+
+
 @register_module("--wer")
 class WER(Module):
     DESC = "WER (Windows Error Reporting) related files"
@@ -1960,6 +1970,7 @@ def upload_files(
             History,
             SSH,
             Var,
+            WebHosting,
         ],
         "bsd": [
             Etc,