LC_ALL=C awk '$13 ~ /WordPress/ {sub(",","",$1); IP[$1]++}END{for (i in IP) print IP[i],i}' /var/log/httpd/access_logs | sort -rn | head -3

17473 123.123.123.123
12808 123.123.123.124
12603 123.123.123.125

tail -f /var/log/httpd/access_log | LC_ALL=C awk '$13 ~ /WordPress/ {sub(",","",$1); IP[$1]++}{for (i in IP) print IP[i],i}' | awk '$1 > 20'

101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
101 123.123.123.126
102 123.123.123.126
102 123.123.123.126
102 123.123.123.126
102 123.123.123.126
102 123.123.123.126
102 123.123.123.126
102 123.123.123.126
102 123.123.123.126
103 123.123.123.126
103 123.123.123.126
103 123.123.123.126
103 123.123.123.126

110 123.123.123.126
103 123.123.123.127

170 123.123.123.126
146 123.123.123.127

for i in {1..20}; do timeout -s INT 1 tail -f /var/log/httpd/eurobits.biz > /dev/shm/TAIL$i; tput cup 1 0 && tput clear && LC_ALL=C awk '$13 ~ /WordPress/ {sub(",","",$1);IP[$1]++}END{for (i in IP) print IP[i],i}' /dev/shm/TAIL* | sort -rn | head -10; sleep .1; done

103 123.123.123.126
73 123.123.123.127
66 123.123.123.128
33 123.123.123.129