Check Apache / IIS log command

cat /var/log/httpd/access_log |grep 'XXX.zip' | awk '{print $1}' | sort | uniq -c | sort -nr

Count the attacker IP number to access XXX.zip in apache log.

cat /mnt/nt3-c/inetpub/logs/LogFiles/W3SVC7/u_ex140312.log |grep 'ApacheBench' | awk '{print $9}' | sort | uniq -c | sort -nr

Count the attacker IP number to access XXX.zip in IIS log.