FTP Logging

[ArmyITGuy]

I'm kinda new to this.

I have an FTP server setup with no anon. access, I'd like to log when a user logs on/off and ideally what files they transfer up or down.

I've looked through the help files and I'm not getting anywhere. Perhaps it's me.

Any guidance would be helpful and greatly appreciated.

 

[cdlvj]

FTP Server with IIS.?

One of the dialogs allows you to set it and what format.

 

[ArmyITGuy]

Yeah,...should have clarifie that. FTP via IIS.

 

[ArmyITGuy]

Found it. ...duh.
Ok the logging box was checked and I found the folder with the logs. Next question:
In the logs I have two entries that are kinda disturbing:

Since I have changed the administrator account for security, this looks like an attempt to hack the server.
#Fields: time c-ip cs-method cs-uri-stem sc-status sc-win32-status
23:10:42 202.131.141.50 [1]USER Administrator 331 0
23:10:43 202.131.141.50 [1]PASS - 530 1326



Knowing FTP sets up a seperate connection for file transfer from the control connection...is this the logging of that control connection or another hack?

#Fields: time c-ip cs-method cs-uri-stem sc-status sc-win32-status
05:14:20 81.57.169.170 [2]USER anonymous 331 0
05:14:20 81.57.169.170 [2]PASS anonymous 530 1326