$logs = get-item \\rejk-p-web005\d-drive\ifsbosystem\log\cws.log* $logs += get-item \\rejk-p-web006\d-drive\ifsbosystem\log\cws.log* $logs += get-item \\rejk-p-web007\d-drive\ifsbosystem\log\cws.log* $logs += get-item \\rejk-p-web008\d-drive\ifsbosystem\log\cws.log* $logs = $logs | Where { $_.LastWriteTime -gt (Get-Date).AddHours(-24) } $strings = $logs | Select-String -Pattern 'X-Forwarded-For=([0-9\.]*)' $ips = $strings | % { $_.Matches[0].Groups[1].Value } $group = $ips | group $group | sort count | select -last 10