获取连接服务器IP地址的详细信息
代码：
# -*- coding: utf-8 -*-
import os
import time
import geoip2.database
from prettytable import PrettyTable
def get_ip():
"""
活动OS当前活动连接IP地址列表（TOP 20）
:return:
"""
cmd = '''netstat -anlp|grep tcp |awk '{print $5}'|awk -F: '{print $1}' | sort | uniq -c | sort -nr | head -n20 '''
result = []
get_cmd = os.popen(cmd).readlines()
for e in get_cmd:
temp = e.lstrip() # 删除左边的空格
temp = temp.replace('\n', '') # 删除换行符
temp = temp.split(' ')
result.append(temp)
return result
def get_city(ip_addr):
"""
获取IP地址的地理位置
:param ip_addr:
:return:
"""
reader = geoip2.database.Reader('GeoLite2-City.mmdb')
response = reader.city(ip_addr)
_city = response.city.names.get('zh-CN', '')
#_province = response.subdivisions.most_specific.names['zh-CN']
#print(_province)
_county = response.country.names['zh-CN']
result = _county + _city
return result
table = PrettyTable(["IP Address", "来自地区", "连接会话"])
ip_list = get_ip()
# print(ip_list)
for e in ip_list:
ip_add = e[1]
if ip_add == '127.0.0.1' or ip_add == '0.0.0.0':
continue
if ip_add.find('192.168') >= 0 or ip_add.find('10.0') >= 0 or ip_add.find('172.16.') >= 0:
continue
table.add_row([ip_add, get_city(ip_add), e[0]])
dt = time.strftime("%Y-%m-%d %H:%M:%S", time.localtime())
print('\033[1;31m', '检测时间：', dt, "\033[0m")
#table.reversesort = True
print(table)
测试
# python get_ip1.py
检测时间： 2019-01-18 18:46:01
+-----------------+----------------+----------+
| IP Address | 来自地区 | 连接会话 |
+-----------------+----------------+----------+
| 125.41.133.197 | 中国郑州 | 18 |
| 221.176.120.221 | 中国 | 2 |
| 198.143.164.254 | 美国芝加哥 | 1 |
| 216.244.66.230 | 美国史帝文斯湖 | 1 |
| 117.159.26.226 | 中国周口市 | 1 |
+-----------------+----------------+----------+
文章评论