Locating a validated user by IP address..

[crechebaby]

Hi
I'm a little new to all of this, so please bear with me if my questions seem naive or simplistic in any way.

My website was recently hacked by a malicious 3rd party who caused all sorts of trouble. It's been dealt with, but I have a suspicion that the 3rd party involved may be one of the users on my site. My users validate themselves through an .htaccess file that protects the content folder.

Tech support has supplied me with the IP address of the 3rd party, but that is all I have to go on. I'm assuming that my server logs validating IPs.. is there a way to match IPs up against their validating usernames?

[DeadBeet]

Do you have your site keep a list of people who validate themselves?

[crechebaby]

Yes, the site does keep a list. I have AWstats and Webalizer installed (default installations with the server package I pay for), and they both show me a complete list of authenticated users, plus the bandwidth they have downloaded, etc, month to month. No IP, obviously, or I wouldn't be here

[DeadBeet]

I suggest, that you make it so that u can view the IP's

[saidev]

It is an apache server? How about the raw log? The raw logs always have the ip address.

I hate to tell you, if someone is meant to hack your server, they most likely hack other boxes have use the hacked box into the real target.