Specially to look at successful logins and audit where they come from. This is a good blog post on the subject:
https://blog.sucuri.net/2016/03/server-security-anomaly-beha...
Specially to look at successful logins and audit where they come from. This is a good blog post on the subject:
https://blog.sucuri.net/2016/03/server-security-anomaly-beha...