Why does cPanel always display last login from 127.0.0.1?

If the previous login were using an insecure (http) connection to login, the actual IP address of the person logging in would appear.

Any login using SLL ("secure socket layer" or https) will always show the address 127.0.0.1 because cPanel only see the connection coming from the localhost.

Login via regular http has been disabled on all our servers for security reasons. Therefore, 127.0.0.1 is the only address you will ever see there.