#!/bin/bash awk '/ESTABLISHED/ && /3306/{print $5}' | awk -F ":" ' { ++mp[$1];} END{ for(i in mp) print(mp[i],i) }' | sort -rnk 1