• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 425
  • Last Modified:

windows server 2008, see a log of all ip address vistors

how to see all ip addresses visited and error code
2 Solutions
I see the IIS tag, so assuming we are looking for web visitors, by default IIS logs data to \inetpub\logs\LogFiles.

In the case of a default installation of IIS to the C: drive, it would be C:\Inetpub\logs\LogFiles\W3SVC1.  The HTTP code is the fourth number from the end of the line by default (sc-status).
to get a overview you could use logparser from microsoft for your logfiles:

and use a statement like this:
logparser "select c-ip, sc-status from \\webserver\logfilepath\u_Ex091218.log"

or grouped by ip&status with number of events:
logparser "select c-ip,sc-status,count(*) from \\webserver\logfilepath\u_Ex091218.log group by c-ip,sc-status"

you could even do this for all logfiles/days in one statement:
logparser "select c-ip,sc-status,count(*) from \\webserver\logfilepath\*.log group by c-ip,sc-status"
rgb192Author Commented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now