Free Search Tool for Windows Server IIS FTP Log Files
FTP Log IP Search
Free Download (36 Kb)
Are you attached to a piece of software that just 'Makes Your Day'? There are thousands upon thousands of software developers that are passionate about building useful tools to help solve everday needs. In many cases the software that developers create are released free to the public as freeware -- software that does not have to be purchased or licensed. There are tons of web sites dedicated to searching and categorizing freeware, but sometimes you can't find exactly what you are looking for.
Recently, we noticed an ongoing brute force attack on our client FTP Server that was degrading system performance and using up system resources. A brute force attack is when someone/something tries to guess usernames and passwords to gain unauthorized access to a system. We have a lot of clients that access their web hosting via our FTP services, but none of them have the username of 'Admin' or 'Administrator' so it was pretty obvious someone was trying to gain unauthorized access.
One way to block the unauthorized access is to go through server log files and look for the attempted logins as 'Admin' or 'Administrator' and block the individual IP Addresses of associated malicious systems at the network firewall. When we realized we would have to search 65 Megabytes of worth of FTP log files (equivalent to 65 thick novels/books) -- we decided it was time to write a little program to handle the specific task for us.
Now, Sharp Hue is not known for building desktop software tools, but we are problem solvers and decided to tackle the challenge anyhow. The product is a freeware utility called, FTP Log IP Search:
The application is rather basic, but easy to use and can rip through 65 megabytes of logfiles while you do other things.
- First, select the directory containing the log files.
- Next type in a phrase that you suspect is appearing in the log files -- in our case it was the user trying to login as 'admin'.
- Specify the column number that the IP Address appears in your log files ... remember that column numbering starts at 0, yes, Zero!
- Execute the search and go do other things.



