Differences between revisions 8 and 11 (spanning 3 versions)
Revision 8 as of 2006-10-31 15:12:23
Size: 2736
Editor: ZoomQuiet
Comment:
Revision 11 as of 2006-10-31 15:32:01
Size: 2227
Comment: ZoomQuiet你搞错了,那个IP是我的
Deletions are marked like this. Additions are marked like this.
Line 5: Line 5:
== 日志 ==
 * 根据 Apache 的日志记录:{{{219.142.250.46 - - [31/Oct/2006:23:04:26 +0800] "GET /moin/UsenetTroll?action=info HTTP/1.1" 200 21694 "http://wiki.woodpecker.org.cn/moin/UsenetTroll" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7"
219.142.250.46 - - [31/Oct/2006:23:04:30 +0800] "GET /moin/UsenetTroll?action=AttachFile&do=del&target=b_9F9D4FFB7F3B520D.jpg HTTP/1.1" 200 11240 "http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=info" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7"
219.142.250.46 - - [31/Oct/2006:23:04:37 +0800] "GET /moin/FindPage HTTP/1.1" 200 19071 "http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=AttachFile&do=del&target=b_9F9D4FFB7F3B520D.jpg" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7"
219.142.250.46 - - [31/Oct/2006:23:08:05 +0800] "GET /moin/UsenetTroll HTTP/1.1" 200 18568 "http://wiki.woodpecker.org.cn/moin/RecentChanges" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7"
219.142.250.46 - - [31/Oct/2006:23:08:08 +0800] "GET /moin/UsenetTroll?action=info HTTP/1.1" 200 21983 "http://wiki.woodpecker.org.cn/moin/UsenetTroll" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7"
219.142.250.46 - - [31/Oct/2006:23:09:44 +0800] "GET /moin/UsenetTroll?action=diff&rev2=12&rev1=10 HTTP/1.1" 200 27499 "http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=info" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7"
}}}
 * 居然是使用 FireFox 的东西!!! 访问IP 是 `219.142.250.46`
Line 48: Line 39:
=== 牵涉 ===
 * {{{下午清除newbie007 10月27日在UsenetTroll页面的恶意篡改有关。见
http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=info
newbie007将UsenetTroll页面的Chris Qie全部改成了ZoomQuiet,也请封禁此用户。

也许 suckmydick、newbie007和Chris Qie是一个人。
}}}
  * 帐号细节如下... `@ms.com` 可能是 http://www.morganstanley.com/ 一英国公司,
  * 但是`biilgates`应该也是伪名! 清除之!
{{{> grep newbie007 *
1161892362.76.20266:name=newbie007
> cat 1161892362.76.20266
# Data saved '2006-10-27 03:53:44' for id '1161892362.76.20266'
aliasname=newbie2007
css_url=
date_fmt=
datetime_fmt=
disabled=0
edit_on_doubleclick=0
edit_rows=20
editor_default=text
editor_ui=freechoice
[email protected]
enc_password={SHA}3S7bh+qet6Mv1AVydtOh+rhhwdU=
language=
last_saved=1161892424.08
mailto_author=0
name=newbie007
quicklinks=
remember_last_visit=0
remember_me=1
show_fancy_diff=1
show_nonexist_qm=0
show_page_trail=1
show_toolbar=1
show_topbottom=0
subscribed_pages=
theme_name=woodpecker
tz_offset=0
want_trivial=0
wikiname_add_spaces=0
}}}

== 截屏 ==

06-10-31.Spamer第3次袭来!

  • 注册为 suckmydick 的东西

    • 20:31 注册后就开始乱改,22:10左右被发现,22:15 发布警报;22:30清除注册名;在[wiki:andelf andelf]和QiangningHong 的协助下 22:43 完成所有污染页面的清除,但是部分附件被恶意删除不能恢复!

      • 倡议追踪此人,进行网络鄙视!!!

细节

  • # Data saved '2006-10-31 20:31:25' for id '1162297883.76.32758'
    aliasname=
    css_url=
    date_fmt=
    datetime_fmt=
    disabled=0
    edit_on_doubleclick=0
    edit_rows=20
    editor_default=text
    editor_ui=freechoice
    [email protected]
    enc_password={SHA}5HxYCc1Ml/whq8zt/Yc6TKjZNkk=
    language=
    last_saved=1162297885.33
    mailto_author=0
    name=suckmydick
    quicklinks=
    remember_last_visit=0
    remember_me=1
    show_fancy_diff=1
    show_nonexist_qm=0
    show_page_trail=1
    show_toolbar=1
    show_topbottom=0
    subscribed_pages=
    theme_name=woodpecker
    tz_offset=0
    want_trivial=0
    wikiname_add_spaces=0

牵涉

  • {{{下午清除newbie007 10月27日在UsenetTroll页面的恶意篡改有关。见

http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=info newbie007将UsenetTroll页面的Chris Qie全部改成了ZoomQuiet,也请封禁此用户。

也许 suckmydick、newbie007和Chris Qie是一个人。 }}}

{{{> grep newbie007 * 1161892362.76.20266:name=newbie007 > cat 1161892362.76.20266 # Data saved '2006-10-27 03:53:44' for id '1161892362.76.20266' aliasname=newbie2007 css_url= date_fmt= datetime_fmt= disabled=0 edit_on_doubleclick=0 edit_rows=20 editor_default=text editor_ui=freechoice email=[email protected] enc_password={SHA}3S7bh+qet6Mv1AVydtOh+rhhwdU= language= last_saved=1161892424.08 mailto_author=0 name=newbie007 quicklinks= remember_last_visit=0 remember_me=1 show_fancy_diff=1 show_nonexist_qm=0 show_page_trail=1 show_toolbar=1 show_topbottom=0 subscribed_pages= theme_name=woodpecker tz_offset=0 want_trivial=0 wikiname_add_spaces=0 }}}

截屏

  • attachment:061031-spamer_768x336_scrot.png

attachment:061031-spam_844x656_scrot.png

woodpecker-log/2006-10-31 (last edited 2009-12-25 07:15:52 by localhost)