Log Parser Plus example query

IP addresses attempting to log into an IIS 6 FTP site

This query will show you what ip addresses attempted to log into your FTP site, and will give a count of how many times.
Keywords:
  • iis6ftp
Statement:
logparser -rtp:-1 "SELECT c-ip, count(*) INTO FTPIPLoginAttempts.txt FROM ex*.log GROUP BY c-ip ORDER BY count(*), c-ip"
Notes: See <a href="http://strivinglife.com/words/post/Using-Log-Parser-to-find-users-accounts-used-to-log-into-an-FTP-site.aspx" rel="external">Using Log Parser to find users accounts used to log into an FTP site</a> for more information. Leave a comment on this query.

View more examples.


blog comments powered by Disqus