A simple script that counts the number of established connections by IP address. Typically used to see if one particular IP is using more connections than they should.
#!/bin/sh
netstat -an | grep ESTABLISHED | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n