It took me 8 of my 20 years

me@box:~$ awk '{print $9, $1, $7}' httpd-access.log | egrep '^302' | sed 's/\?.*$//' | uniq -c | sort -nr | head

153 302 54.175.189.223 /index.php

72 302 54.175.189.223 /index.php

67 302 2a01:4f8:10b:2791::2 /index.php

50 302 34.201.164.6 /index.php

48 302 34.201.161.201 /index.php

41 302 34.207.212.223 /index.php

40 302 54.175.189.223 /index.php

35 302 2a01:4f8:10b:2791::2 /index.php

34 302 34.207.212.223 /index.php

34 302 34.201.164.6 /index.php