Log-file of webserver access like NGINX or APACHE

Hi,

where can i find the logfiles of access to the webserver? I have unwanted access to my hassio-Installation. Some external users are triggering my helper functions and so they will be able to open my frontdoor and ring my doorbell.

I like to see, what ip-address has access and how they have access?

Long-Life-Tokens or do they know my login credentials?

I can not find any webserver logfile like in NGINX oder APACHE Web-Server.