# sort access log and find top users:
# https://www.mariusv.com/sort-web-server-logs-to-find-top-users

cat /path/to/access.log | awk '{print $1}' | sort | uniq -c | sort -n | tail