there are many logs created by the many applications running on your server. (i.e apache, mysql, ssh, ftp, etc.) Need to look at these logs.