Usando o netstat ver os ips com mais acesso

as ultimas 5 ips mas acessados
netstat -na | grep ^tcp | grep ESTAB | awk ‘{print $5}’ | cut -d: -f1 | grep -v 127.0.0.1 | grep -v 10.20.43.40 | sort | uniq -c | sort -nr | head -5

todos
netstat -na | grep ^tcp | grep ESTAB | awk ‘{print $5}’ | cut -d: -f1 | grep -v 127.0.0.1 | grep -v 10.20.43.40 | sort | uniq -c | sort -nr | head -5

http://www.commandlinefu.com/commands/using/netstat