Задача: хранение и просмотр журналов сервера с ОС Linux в СУБД PostgreSQL. Визуализация накопленных данных. Приём журналов с активного сетевого оборудования через механизм syslog.
Источники
Решения
1. Использование journalctl для просмотра и анализа логов: подробный гайд
2. Lnav
I dedicate my site to my sons, ancestors and all my relatives.
Greetings! My name is Igor Lytkin.
I graduated in 1997 from the Altai State Technical University named after I.I. Polzunov with a degree in Computer Software and Automated Systems, received the qualification Engineer.
My interests are scientific outlook, reading books, watching lectures by scientific popularizers (neurobiology, cognitive sciences, astrophysics, physics, mathematics and other sciences), playing sports (skiing, cycling, walking, swimming), healthy lifestyle, art and culture.
My motto is “There are two ways to live life: either as if miracles do not happen, or as if all life is a miracle” Albert Einstein.
My pages on social networks: Facebook, Twitter, LinkedIn
My YouTube - Lytkin Science Lab by V.S. Popovich
About my kind Lytkin.
In the photo above from left to right - Zoya Nikitichna Lytkina, my maternal grandmother, Nina Nikitichna Baidakova (my grandmother's sister), the bottom row - great-grandmother Alexandra Dmitrievna Lytkina (Kolmogorova), great-grandfather Nikita Ivanovich Lytkin.
Центральный банк Российской Федерации проводит программу по финансовому просвещению граждан Российской Федерации, заинтересованных в повышении своей финансовой грамотности. Приглашаю к участию в программе всех желающих.
Смотрите Финансовая грамотность
Группа в Facebook "Финансовое просвещение"
Soft skills (англ. «мягкие навыки») связаны не с конкретным видом деятельности, а с коммуникациями для эффективного взаимодействия с коллегами, клиентами и партнерами. Их часто называют «личными качествами», подчеркивая прямую зависимость между soft skills и характером человека, его темпераментом и личным опытом.
Английский язык - школа SkyEng, просмотр фильмов на английском языке - Netflix
Выбор профессии для детей - каталог профессий Сколково
Team building - Сергей Вахрушев (Хабаровск)
Тренажеры для мозга - Wikium
Тайм-менеджемент - OneCalendar + ASUS ZenFone PRO M2
Лог сервера забит попытками китайца проверить безопасность моего сайта.
139.199.119.67 - - [13/Apr/2019:22:43:49 +0000] "GET /phpmyadmin/index.php?pma_username=root&pma_password=111111111&server=1 HTTP/1.0" 200 12701 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
139.199.119.67 - - [13/Apr/2019:22:43:50 +0000] "GET /phpmyadmin/index.php?pma_username=root&pma_password=1111111111&server=1 HTTP/1.0" 200 12701 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
139.199.119.67 - - [13/Apr/2019:22:43:53 +0000] "GET /phpmyadmin/index.php?pma_username=root&pma_password=121212&server=1 HTTP/1.0" 200 12701 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
root@iabzalov:~# whois 139.199.162.213
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2019, American Registry for Internet Numbers, Ltd.
#
NetRange: 139.199.0.0 - 139.199.255.255
CIDR: 139.199.0.0/16
NetName: APNIC-ERX-139-199-0-0
NetHandle: NET-139-199-0-0-1
Parent: NET139 (NET-139-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is not registered in the ARIN database.
Comment: This range was transferred to the APNIC Whois Database as
Comment: part of the ERX (Early Registration Transfer) project.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref: https://rdap.arin.net/registry/ip/139.199.0.0
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
ResourceLink: whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail:This email address is being protected from spambots. You need JavaScript enabled to view it.
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail:This email address is being protected from spambots. You need JavaScript enabled to view it.
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2019, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '139.199.0.0 - 139.199.255.255'
% Abuse contact for '139.199.0.0 - 139.199.255.255' isThis email address is being protected from spambots. You need JavaScript enabled to view it. '
inetnum: 139.199.0.0 - 139.199.255.255
netname: TencentCloud
descr: Tencent cloud computing (Beijing) Co., Ltd.
descr: Floor 6, Yinke Building,38 Haidian St,
descr: Haidian District Beijing
admin-c: JT1125-AP
tech-c: JX1747-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
status: ALLOCATED PORTABLE
last-modified: 2015-01-29T06:14:02Z
source: APNIC
irt: IRT-CNNIC-CN
address: Beijing, China
e-mail:This email address is being protected from spambots. You need JavaScript enabled to view it.
abuse-mailbox:This email address is being protected from spambots. You need JavaScript enabled to view it.
admin-c: IP50-AP
tech-c: IP50-AP
auth: # Filtered
remarks: Please note that CNNIC is not an ISP and is not
remarks: empowered to investigate complaints of network abuse.
remarks: Please contact the tech-c or admin-c of the network.
mnt-by: MAINT-CNNIC-AP
last-modified: 2017-11-01T08:57:39Z
source: APNIC
person: James Tian
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-84952
e-mail:This email address is being protected from spambots. You need JavaScript enabled to view it.
nic-hdl: JT1125-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2016-10-31T07:10:47Z
source: APNIC
person: Jimmy Xiao
address: 9F, FIYTA Building, Gaoxinnanyi Road,Southern
address: District of Hi-tech Park, Shenzhen
country: CN
phone: +86-755-86013388-80224
e-mail:This email address is being protected from spambots. You need JavaScript enabled to view it.
nic-hdl: JX1747-AP
mnt-by: MAINT-CNNIC-AP
last-modified: 2016-11-04T05:51:38Z
source: APNIC
% Information related to '139.199.0.0/16AS45090'
route: 139.199.0.0/16
descr: TencentCloud
descr: Tencent cloud computing (Beijing) Co., Ltd.
country: CN
origin: AS45090
notify:This email address is being protected from spambots. You need JavaScript enabled to view it.
mnt-by: MAINT-CNNIC-AP
last-modified: 2016-01-21T09:24:01Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-UK3)
Лечение настырного китайца - добавил в firewall правила
DROP TCP 139.199.119.67