Log Parser Plus example query
IP addresses attempting to log into an IIS 6 FTP site
This query will show you what ip addresses attempted to log into your FTP site, and will give a count of how many times.
Statement:Notes: See Using Log Parser to find users accounts used to log into an FTP site for more information. Leave a comment on this query.
logparser -rtp:-1 "SELECT c-ip, count(*) INTO FTPIPLoginAttempts.txt FROM ex*.log GROUP BY c-ip ORDER BY count(*), c-ip"
blog comments powered by Disqus