Apache access log finding the 10 IPs with the most connections

You can use the command below to list the IP addresses that query the Apache service during an attack or for reporting.

Log file paths are below.

/var/log/http/access_log # RedHat
/var/log/apache2/access.log # Ubuntu Debian
/var/log/http-access.log # FreeBSD

Query command:

awk '{ print $1}' /var/log/apache2/access.log | sort | uniq -c | sort -nr | head -n 10

You can click for our Türkiye location virtual servers.