Powerpipe MCP Server →

Plugins Docs Home

turbot/tailpipe-mod-nginx-access-log-detections

activity_dashboard_bad_request_count activity_dashboard_error_count activity_dashboard_redirect_count activity_dashboard_requests_by_day activity_dashboard_requests_by_errors activity_dashboard_requests_by_http_method activity_dashboard_requests_by_status_code activity_dashboard_requests_by_successful_requests activity_dashboard_requests_by_user_agent activity_dashboard_success_count activity_dashboard_top_10_clients activity_dashboard_top_10_urls activity_dashboard_total_logs cross_site_scripting_angular_template cross_site_scripting_attribute_injection cross_site_scripting_common_patterns cross_site_scripting_dom_based cross_site_scripting_encoding cross_site_scripting_html_injection cross_site_scripting_javascript_methods cross_site_scripting_javascript_uri cross_site_scripting_script_tag encoded_path_traversal header_based_local_file_inclusion hidden_file_access log4shell_vulnerability os_file_access path_traversal restricted_file_access spring4shell_vulnerability sql_injection_blind_based sql_injection_common_patterns sql_injection_error_based sql_injection_time_based sql_injection_union_based sql_injection_user_agent_based

Query: Top 10 Clients (Requests)

Description

List the top 10 client IPs by request count.

Usage

powerpipe query nginx_access_log_detections.query.activity_dashboard_top_10_clients

Tailpipe Tables

nginx_access_log

Nginx plugin

SQL

select
  remote_addr as "Client IP",
  count(*) as "Request Count"
from
  nginx_access_log
group by
  remote_addr
order by
  count(*) desc,
  remote_addr
limit 10;

Dashboards

The query is used in the dashboards:

Access Log Activity Dashboard