turbot/tailpipe-mod-aws-s3-server-access-log-detections

Query: Top 10 Source IPs

Description

List the top 10 source IPs by request count.

Usage

powerpipe query aws_s3_server_access_log_detections.query.activity_dashboard_requests_by_source_ip

SQL

select
tp_source_ip as "Client IP",
count(*) as "Request Count"
from
aws_s3_server_access_log
where
tp_source_ip != ''
group by
tp_source_ip
order by
count(*) desc,
tp_source_ip
limit 10;

Dashboards

The query is used in the dashboards: