Users logged into IIS 6 FTP site

Log Parser Plus example query

Users logged into IIS 6 FTP site

Parses IIS 6 FTP logs for user accounts who have successfully logged in, and returns the IP(s) used and the number of times they logged in from those IPs.

Keywords:

iis6ftp

Statement:

logparser -rtp:-1 "SELECT cs-username, c-ip, count(*) INTO FTPUsersLoggedIn.txt FROM ex1008*.log WHERE sc-status = '230' GROUP BY cs-username, c-ip ORDER BY count(*), cs-username, c-ip"

Notes: See Using Log Parser to find users accounts used to log into an FTP site for more information. Leave a comment on this query.

View more examples.