2012-02-16 79 views
2

我有一个体面的管理脚本,用于检查哪些IP地址也是在Web应用程序上登录,但我需要在开始时更加喜欢whois,然后我认为是geoip。bash IP whois查询脚本

在我散列出它的whois的一部分的时刻 - 我的问题是,由于有多个IP地址 - 该域名注册不知道该怎么跟他们做

任何想法在这将是巨大的? geoips上的想法也很可爱!

干杯

#!/bin/bash 

#Setting date and time (y and z aren't being used at the moment) 
x="$(date +'%d/%b/%Y')" 
y="$(date +'%T')" 
z="$(date +'%T' | awk 'BEGIN { FS =":"} ; {print $1}')" 

#Human readable for email title 
emaildate=$(date +"%d%b%Y--Hour--%H") 

#Setting date and time for grep and filename 
beta="$(date +'%d/%b/%Y:%H')" 
sigma="$(date +'%d-%b-%Y-%H')" 

#Current SSL Access logs 
log='/var/log/apache2/ssl_access.log' 
#Set saved log location 
newlogs=/home/user/Scripts/logs 

grep [email protected] $log | grep $beta | awk 'BEGIN { FS = " " } ; { print $1 }' | sort -u >> $newlogs/adminusage"$sigma".txt 

#Preform whois 
#whoip=`grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' $newlogs/adminusage"$sigma".txt | sort | uniq >> $testing` 
#echo $whoip 
#testing="/home/user/Scripts/testing.txt" 
#IPlookup="/home/user/Scripts/iptest.txt" 


#Preform Usage for the current hour 
if 
grep -v 1.1.1.1 $newlogs/adminusage"$sigma".txt 
then 
#whois $testing >> $IPlookup 
mail -s "Admin Usage for $emaildate" email.com < $newlogs/adminusage"$sigma".txt 
else 
echo 
fi 

回答

2

只需使用一个循环,并调用whois每次迭代

一次假设你的grep返回一个以换行符分隔的IP地址列表,你可以这样做:

grep ... | sort | uniq | while IFS= read -r ip ; do 
    whois "$ip" >> whatever 
done 
0

如果您有多个IP地址,只需在他们环路和WHOIS在每次运行:

for address is $whoip ; do 
    whois $address 
done