[ps94726]$ grep wp-login.php access.log.*  | cut -f 3,8 -d " " | cut -f 1 -d '?' | sort | uniq -c | sort -r -n -k 1 | less
   
   5377 brainwashed.com /wc/wp-login.php
   2965 brainwashed.com /index.php
   1902 dontsweattheessay.com /wp-login.php
   1826 elizabethbenedict.com /wp-login.php
    827 primary-numbers.com /wp-login.php
    258 brainwashed.com /wp-login.php
     47 rrrecords.com /wp-login.php
     20 thenewyear.net /wp-login.php
     15 turbid.com /wp-login.php
     14 brainwashed.com /podcast/wp-login.php
      6 bedheadband.com /wp-login.php
      5 kranky.net /wp-login.php
      4 stormyrecords.com /wp-login.php
      4 killerpimp.com /wp-login.php
      4 brainwashed.com /rrr/wp-login.php
      3 cloud-zero.org /wp-login.php
      3 brainwashed.com /common/wp-login.php
      3 brainwashed.com /coil/wp-login.php
      2 michaelmeltsner.com /wp-login.php
      2 brainwashed.com /tortoise/wp-login.php
      2 brainwashed.com //wp-login.php
      2 brain-waves.org /wp-login.php
      1 media.brainwashed.com /wc/wp-login.php
      1 elizabethbenedict.com //wp-login.php
      1 dontsweattheessay.com //wp-login.php
      1 brainwavesfestival.org /wp-login.php
      1 brainwavesfest.org /wp-login.php
      1 brainwashed.com /nww/wp-login.php
      1 brainwashed.com /mumma/wp-login.php

[ps94726]$ grep xmlrpc.php access.log.*  | cut -f 3,8 -d " " | cut -f 1 -d '?' | sort | uniq -c | sort -r -n -k 1 | less

    935 brainwashed.com /aranos/xmlrpc.php
    642 dontsweattheessay.com /xmlrpc.php
    621 brainwashed.com /wc/xmlrpc.php
    416 elizabethbenedict.com /xmlrpc.php
    385 primary-numbers.com /xmlrpc.php
     40 brainwashed.com /xmlrpc.php
     31 dontsweattheessay.com //xmlrpc.php
     24 primary-numbers.com //xmlrpc.php
     24 elizabethbenedict.com //xmlrpc.php
      5 kranky.net /xmlrpc.php
      5 kranky.net //xmlrpc.php
      3 turbid.com /xmlrpc.php
      3 rrrecords.com /xmlrpc.php
      3 rrrecords.com //xmlrpc.php
      3 brainwashed.com /podcast/xmlrpc.php
      3 brainwashed.com /commerce/xmlrpc.php
      2 thenewyear.net //xmlrpc.php
      2 stormyrecords.com //xmlrpc.php
      2 brainwashed.com /wp-xmlrpc.php
      1 killerpimp.com /xmlrpc.php
      1 brainwavesfest.org //xmlrpc.php
      1 brainwashed.com /index.php