Fused Fiber Posted April 20, 2009 Share Posted April 20, 2009 Hello, I had a client sign-up with our services and host several phishing sites, it showed his "last login IP" to be a real Cox IP address, now I checked it and it says its a VPN IP. How can I retrieve that Cox IP from the system? I need it to provide to the police... (I believe he ordered from the Cox IP) Any help would be appreciated! Thanks! 0 Quote Link to comment Share on other sites More sharing options...
othellotech Posted April 20, 2009 Share Posted April 20, 2009 unles you've added some additional racking or your own history of the logons, you cant (although it *might* be on the email copy of the order you got from WHMCS) 0 Quote Link to comment Share on other sites More sharing options...
Fused Fiber Posted April 20, 2009 Author Share Posted April 20, 2009 That's what I was afraid of, and I checked my email where notifications are delivered, and of course I can't seem to locate that ONE email. =/ Is there anyway I can lookup that email it send me? 0 Quote Link to comment Share on other sites More sharing options...
sparky Posted April 20, 2009 Share Posted April 20, 2009 Hopefully you have been doing daily backups of your DB!! Create a New test DB on your server and import your backup from the day that you thought it was and look in the tblclients table for that user. (lastlogin, ip, and host) with phpMyAdmin. 0 Quote Link to comment Share on other sites More sharing options...
Fused Fiber Posted April 20, 2009 Author Share Posted April 20, 2009 Oh, that may just work Thanks Sparky. 0 Quote Link to comment Share on other sites More sharing options...
sparky Posted April 20, 2009 Share Posted April 20, 2009 no problem, hope you find it 0 Quote Link to comment Share on other sites More sharing options...
Fused Fiber Posted April 20, 2009 Author Share Posted April 20, 2009 Actually dummy me didn't realize that I can just backtrack to the date and time of this and just view my access logs for a cox IP, and I found it. Thanks guys! 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.