apache_anti_ddos.pl

#!/usr/bin/perl

use strict;
use warnings;

# 222.169.193.162 - - [15/Dec/2017:07:24:34 -0500] "GET / HTTP/1.0" 302 483 "-" "Mozilla/5.0 (BlackBerry; U; BlackBerry 9850; en) AppleWebKit/534.11+ (KHTML, like Gecko) Version/7.0.0.254 Mobile Safari/534.11+"

my %ips;

my $cnt = 0;
while ( my $line = <STDIN> ) {
    my @f = split( ' ', $line );
    $ips{ $f[0] } += 1;
    #$ips{ $f[0] }{ agent } = $f[
    $cnt++;
    if ( $cnt >= 10 ) {
        $cnt = 0;
        print `clear`;
        print '----------------'."\n";
        for my $ip ( sort keys %ips ) {
            next if $ips{ $ip } <= 10;
            print $ip.' '.$ips{ $ip }."\n";
        }
    }
}