Just an FYI, there's no need for any the perl.

Code: 
tail -n 300 access.log | grep libwww | wc -l
tail -n 300 access.log | grep -oE '^\b[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+\b' | uniq -c | sort -n
JmZ Reviewed by JmZ on . The epic guide to filtering DDoS attacks This thread will probably end up in the tutorials section eventually, but for now I'll place it here. It should be a pretty handy guide for a lot of people. DDoS attacks aren't uncommon and sometimes it's possible to filter them out server side, sometimes not. For the times that are however, the following suggestions should be pretty handy. These are mainly for the "common HTTP flood". There are many, many types of attacks, but we'll focus on this one for now. This guide will assume a few of Rating: 5