unix/linux command to list top IP's accessing your site

tail -50000 access_log | awk '{print $1}' | sort | uniq -c | sort -n | tail

The -50000 says look at the last 50000 lines of the access_log file. You can tweak that if you need to look at more or less entries.

Posted in linux , unix