getthem shows output in the terminal and optionally creates an HTML file with links to more information for each IP address
Example, see connections to port 80
$ getthem TCP or UDP 80 18 46.12.149.75 17 204.12.219.170 13 84.205.244.136 8 92.118.99.42 8 195.78.86.91 6 79.129.116.143 4 62.38.152.211 2 95.92.7.178 2 85.72.63.93 2 150.70.173.54 2 150.70.173.46 2 150.70.173.44 2 150.70.173.43 1 72.14.199.54 1 180.76.5.161 1 164.61.210.150 1 150.70.173.56 1 150.70.173.53 1 150.70.173.49 1 150.70.173.45 1 150.70.173.42 1 150.70.173.40
Port 80 is the default port. You may set the port eg:
$ getthem 143 TCP or UDP 143 3 79.129.59.177
The getthem script
#!/bin/bash #g0 2012 - http://ipduh.com/contact INFO="http://alog.ipduh.com/2013/02/get-them.html" MID=`id -u` TMP="/tmp/getthem.${MID}.tmp" HTML="/home/public_html/get-them.html" DATE=`date` if [ -z $1 ];then PORT="80" else PORT=${1} fi echo "TCP or UDP ${PORT}" netstat -unta | grep ":${PORT}" | egrep -v "::${PORT}|0.0.0.0|127.0.0.1" | awk '{print $5}' | awk -F ":" '{print $1}' | sort |uniq -c|sort -nr | tee ${TMP} echo "<html><head><title>get-them ${DATE}</title><body><br>${DATE}<br>Connection(s) on TCP or UDP port(s) ${PORT} <br><br><br>" > ${HTML} cat ${TMP} |awk '{ print $1" <a href=http://ipduh.com/apropos/?"$2" target=blank>"$2"</a><br><br>" }' >> ${HTML} echo "<br><br><a href=${INFO}>get_them source</a></body>" >> ${HTML}
Get them --a simple script that shows connections / IP address to an IP-TCP or IP-UDP port