help w/ IIS 5

[pnj]

howdy.
is there a way to find out what the IP address of someone who is trying to FTP into our site is in the server logs?

also,
how do you set it up so after say, three bad attempts to log in, they can't try for a given amount of time?

thank you

[JoshT]

Check the log file - its in a LogFiles folder under Winnt\System32 by default - but can be changed with ISM (or disabled).

[pnj]

when i check the log files i can't seem to find that info.
all it says is something to the effect of
'failed login attempt' and list the time of the login attempt

I am using the Event Viewer and I doubleclick on the warning/alert thing(it's yellow) and that opens up an small window with the obove information.

but i can't seem to be able to view log files. i'm not real sure were to look. i found the WinnNT\system32 folder you mentioned by using ISM but when i tried to view the files in that folder they seemed like they were compiled or something.
it asked what program i wanted to use to view them, i choose notepad and they looked like compiled code stuff.



thanks

[egiggey]

the log should be in a format similar to this

2002-04-08 23:52:04 24.31.149.209 - 192.168.1.199 GET /default.htm - 304 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.0.3705)