Dionaea蜜罐IP数据地图可视化

 1 Blackhole　　-123
 2 Memcache　　 -11211
 3 SipSession　 -5060
 4 epmapper     -135
 5 httpd        -80
 6 mongod       -27017
 7 mqttd        -1883
 8 mssqld       -1433
 9 mysqld       -3306
10 pptpd        -1723
11 smbd         -445
12 upnpd        -1900

tree -a /opt/dionaea/var/dionaea/bistream > attack.txt #tree命令导出所有数据流记录

Blackhole-123-101.100.146.*-DldOYS

 1 #Used To Split Logging File To IpAddress File.
 2 #Just Run: ./split_to_ipaddr.py Or python split_to_ipaddr.py.
 3 #Blog: http://www.cnblogs.com/khani0cc/
 4 
 5 def split_to_ipaddr():
 6     iF = open('attack.txt','r')
 7     oF = open('ipaddr.txt','w')
 8     lines = iF.readlines()
 9     for line in lines:
10         ipaddr = line.split('-')[2]
11         print ipaddr
12         oF.writelines(ipaddr)
13         oF.writelines('\n')
14     iF.close()
15     oF.close()
16 
17 def main():
18     try:
19         split_to_ipaddr()
20         print "Attack File Split Successful!"
21         exit(0)
22     except Exception, e:
23         print e
24         exit(0)
25 
26 if __name__ == '__main__':
27     main()

chcp 65001

{"ip":"195.154.51.23","country_code":"FR","country_name":"France","region_code":"IDF",
"region_name":"ÃŽle-de-France",
"city":"La Norville","zip_code":"91290","time_zone":"Europe/Paris","latitude":48.5824,
"longitude":2.2618,"metro_code":0}

print("{ip}, {region_name}, {country_name}, {latitude}, {longitude}"）