How to find List of IP addresses access to windows server
Mr X is right, if you can do this using application logs that would be the easiest way. If that is not an option you could reduce the output find piping netstat into findstr.
netstat 30 | findstr ":8080" >> netstat8080.log
You could also script it and filter the output of netstat and only writing the unique IP addresses to file. You could search for a script that has this ability or request it in the scripting repository:
http://gallery.technet.microsoft.com/scriptcenter/site/requests
March 22nd, 2012 4:31pm
Hi,
I have windows server 2003 and we are running some application on this now we want find the list of IP addresses access to my server in the span of one week. How do we do this?
Is there any scripts or application which can save all the one week data in to file
Thanks for your help
Best Regards
Free Windows Admin Tool Kit Click here and download it now
April 7th, 2012 7:42am
Sure, you can easily do this by running netstat. Depending on the information you require exactly this could be as simple as:
netstat 30 >> netstat.log
This will run netstat continuously giving an update every 30 seconds and directly writing that to file. This means any connections opened and closed within those 30 seconds will not be displayed. To work around this you can change the number to either
be smaller or lower depending how fine-grained you require the information. Do note that this will generate a sizable file as every update will be written entirely to the text file.
April 7th, 2012 8:10am
Hello,
Jaap's script may be a solution but you have to note that it will generate a long file for you.
I think it will be better to contact your applications' developers technical support to see if this is tracked in log files.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner 2010 / 2011
Microsoft
Certified Professional
Microsoft
Certified Systems Administrator: Security
Microsoft
Certified Systems Engineer: Security
Microsoft
Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows 7, Configuring
Microsoft
Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
Microsoft
Certified IT Professional: Enterprise Administrator
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Trainer
Free Windows Admin Tool Kit Click here and download it now
April 7th, 2012 8:23am
Mr X is right, if you can do this using application logs that would be the easiest way. If that is not an option you could reduce the output find piping netstat into findstr.
netstat 30 | findstr ":8080" >> netstat8080.log
You could also script it and filter the output of netstat and only writing the unique IP addresses to file. You could search for a script that has this ability or request it in the scripting repository:
http://gallery.technet.microsoft.com/scriptcenter/site/requests
April 7th, 2012 9:35am