钉钉监控样例

#/usr/bin/python
#coding=utf8
import os
import re
import time

dingtalk_text = """curl 'https://oapi.dingtalk.com/robot/send?access_token=XXXXXXXXX' -H 'Content-Type: application/json' -d '{"msgtype": "text", "text": {"content": "Remote login ip, {{}}"}}'"""
while True:
f = os.popen("who")
text = f.read()
f.close()
ips = re.findall(r"((.*?))", text)
for ip in ips:
if not ip.startswith("192.168."):
print ip
os.system(dingtalk_text.replace("{{}}", ip))
time.sleep(10)