Example implementations relate to server access times. A computing device may comprise a processing resource; and a memory resource storing non-transitory machine-readable instructions to cause the processing resource to: determine a media access control (MAC) address of a server; poll a top of rack (TOR) switch connected to the server to capture a packet; determine a source MAC address using the captured packet; determine, based on the source MAC address, an identity of a user computing device; and log, based on a time included in the captured packet, a time the user computing device last accessed the server.