head -2000 access.log > 2000.log
sort排序,uniq去重,-c计数,-n 按数字 r逆序 head -5取前5
cat 2000.log|awk '{print $1}'|sort|uniq -c|sort -nr|head -5
history |head -10|awk '{print $1}'|sort -nr|uniq -c
查询ip来自地址
curl ip.cn?ip=
-------------------
IP: 来自:
#!/bin/bash
log=2000.log
echo -e "\033[32m===============top 5================\033[0m" #绿色显示
cat $log|awk '{print $1}'|sort|uniq -c|sort -nr|head -5
ip=`cat $log|awk '{print $1}'|sort|uniq -c|sort -nr|head -5|awk '{print $2}'`
for i in $ip
do
address=`curl ip.cn?ip=$i 2>/dev/null`
echo $address
done
测试:
ips=''''''
for i in $ips
do
address=`curl ip.cn?ip=$i 2>/dev/null`
echo $address
done