14 lines
528 B
PowerShell
14 lines
528 B
PowerShell
$logs = get-item \\rejk-p-web005\d-drive\ifsbosystem\log\cws.log*
|
|
$logs += get-item \\rejk-p-web006\d-drive\ifsbosystem\log\cws.log*
|
|
$logs += get-item \\rejk-p-web007\d-drive\ifsbosystem\log\cws.log*
|
|
$logs += get-item \\rejk-p-web008\d-drive\ifsbosystem\log\cws.log*
|
|
|
|
$logs = $logs | Where { $_.LastWriteTime -gt (Get-Date).AddHours(-24) }
|
|
|
|
$strings = $logs | Select-String -Pattern 'X-Forwarded-For=([0-9\.]*)'
|
|
|
|
$ips = $strings | % { $_.Matches[0].Groups[1].Value }
|
|
|
|
$group = $ips | group
|
|
|
|
$group | sort count | select -last 10 |