Log Parser Plus example query

IP addresses successfully logging into IIS 6 FTP site

This query will tell you what ip addresses successfully logged into your FTP site.
  • iis6ftp
logparser -rtp:-1 "SELECT c-ip, count(sc-status) INTO FTPSuccessfulIPLogins.txt FROM ex*.log WHERE sc-status = '230' GROUP BY c-ip ORDER BY count(sc-status), c-ip"
Notes: See Using Log Parser to find users accounts used to log into an FTP site for more information. Leave a comment on this query.

View more examples.

blog comments powered by Disqus