Hi:
Could you help me find a way to find out who connected to my server, when, how, and whether active or not?
Today someone tried to shutdown one of the servers, and I need to know who did that.

Thanks,

It is unlike event you will trace who did it as IP masking and other techniques imply, but if you drop question in appropriate forum section you may learn how to improve your security. I think best point would be start with server technology used (Apache, Apache Tomcat, IIS) to get i t fixed first and then maybe fix some odd security lay-backs in underlying OS

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.