https://briansnelson.com/index.php?action=history&feed=atom&title=How_use_GeoIP_on_the_command_line_Centos7 2026-06-04T06:19:50Z Revision history for this page on the wiki MediaWiki 1.24.1 https://briansnelson.com/index.php?title=How_use_GeoIP_on_the_command_line_Centos7&diff=923&oldid=prev 2018-03-28T23:12:02Z

<p>‎<span dir="auto"><span class="autocomment">GeoIP on Command Line</span></span></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 23:12, 28 March 2018</td> </tr><tr><td colspan="2" class="diff-lineno">Line 14:</td> <td colspan="2" class="diff-lineno">Line 14:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>&#160; geoiplookup 209.126.31.213</div></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>&#160; geoiplookup 209.126.31.213</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&#160;</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins class="diffchange diffchange-inline"> </ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>&#160; GeoIP Country Edition: US, United States</div></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>&#160; GeoIP Country Edition: US, United States</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr> <!-- diff cache key briansne_wiki-wiki_:diff:version:1.11a:oldid:922:newid:923 --> </table>

Brian https://briansnelson.com/index.php?title=How_use_GeoIP_on_the_command_line_Centos7&diff=922&oldid=prev 2018-03-28T23:11:43Z

<p>Created page with &quot;==How use GeoIP on the command line Centos7== When parsing logs, I sometimes want to know more information about the ip address. This can be done using GeoIP and bash. ===I...&quot;</p> <p><b>New page</b></p><div>==How use GeoIP on the command line Centos7==<br /> <br /> When parsing logs, I sometimes want to know more information about the ip address. This can be done using GeoIP and bash.<br /> <br /> ===Installing GeoIP===<br /> <br /> yum install GeoIP GeoIP-data<br /> <br /> Sad but true, the GeoIP rpms installed are always out of date and need updated.<br /> <br /> geoipupdate<br /> <br /> ===GeoIP on Command Line===<br /> <br /> geoiplookup 209.126.31.213<br /> <br /> GeoIP Country Edition: US, United States<br /> <br /> Now you can check your logs and grab ips that you would like checked.<br /> <br /> Get a list of ips that hit your site the most<br /> <br /> # cat /var/log/apache/access_log | awk '{print $1}' | sort | uniq -c | sort -rn | head<br /> 63292 176.9.50.244<br /> 45355 75.128.184.187<br /> 23009 209.126.31.213<br /> 19214 216.244.66.203<br /> 17756 216.244.66.250<br /> 17359 192.240.191.2<br /> 11685 84.201.133.28<br /> 8692 23.237.4.26<br /> 7912 46.229.168.68<br /> 7854 46.229.168.67<br /> <br /> Now use it with geoiplookup<br /> <br /> # for x in $(cat /var/log/apache/access_log | awk '{print $1}' | sort | uniq -c | sort -rn | head | awk '{print $2}'); do echo &quot;IP ADDRESS: &quot; $x; geoiplookup $x; done<br /> <br /> IP ADDRESS: 176.9.50.244<br /> GeoIP Country Edition: DE, Germany<br /> IP ADDRESS: 75.128.184.187 <br /> GeoIP Country Edition: US, United States<br /> IP ADDRESS: 209.126.31.213 <br /> GeoIP Country Edition: US, United States<br /> IP ADDRESS: 216.244.66.203 <br /> GeoIP Country Edition: US, United States<br /> IP ADDRESS: 216.244.66.250<br /> GeoIP Country Edition: US, United States<br /> IP ADDRESS: 192.240.191.2<br /> GeoIP Country Edition: US, United States<br /> IP ADDRESS: 84.201.133.28<br /> GeoIP Country Edition: RU, Russian Federation<br /> IP ADDRESS: 23.237.4.26<br /> GeoIP Country Edition: US, United States<br /> IP ADDRESS: 46.229.168.68<br /> GeoIP Country Edition: US, United States<br /> IP ADDRESS: 46.229.168.67<br /> GeoIP Country Edition: US, United States<br /> <br /> Now I know the most popular ip address is from Germany!!</div>

Brian