06-10-31.Spamer第3次袭来!
注册为 suckmydick 的东西
20:31 注册后就开始乱改,22:10左右被发现,22:15 发布警报;22:30清除注册名;在[wiki:andelf andelf]和QiangningHong 的协助下 22:43 完成所有污染页面的清除,但是部分附件被恶意删除不能恢复!
- 倡议追踪此人,进行网络鄙视!!!
细节
# Data saved '2006-10-31 20:31:25' for id '1162297883.76.32758' aliasname= css_url= date_fmt= datetime_fmt= disabled=0 edit_on_doubleclick=0 edit_rows=20 editor_default=text editor_ui=freechoice [email protected] enc_password={SHA}5HxYCc1Ml/whq8zt/Yc6TKjZNkk= language= last_saved=1162297885.33 mailto_author=0 name=suckmydick quicklinks= remember_last_visit=0 remember_me=1 show_fancy_diff=1 show_nonexist_qm=0 show_page_trail=1 show_toolbar=1 show_topbottom=0 subscribed_pages= theme_name=woodpecker tz_offset=0 want_trivial=0 wikiname_add_spaces=0
日志分析
牵涉
{{{下午清除newbie007 10月27日在UsenetTroll页面的恶意篡改有关。见
http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=info newbie007将UsenetTroll页面的Chris Qie全部改成了ZoomQuiet，也请封禁此用户。
也许 suckmydick、newbie007和Chris Qie是一个人。 }}}
newbie007
帐号细节如下... @ms.com 可能是 http://www.morganstanley.com/ 一英国公司,
但是biilgates应该也是伪名! 清除之!
{{{> grep newbie007 * 1161892362.76.20266:name=newbie007 > cat 1161892362.76.20266 # Data saved '2006-10-27 03:53:44' for id '1161892362.76.20266' aliasname=newbie2007 css_url= date_fmt= datetime_fmt= disabled=0 edit_on_doubleclick=0 edit_rows=20 editor_default=text editor_ui=freechoice email=[email protected] enc_password={SHA}3S7bh+qet6Mv1AVydtOh+rhhwdU= language= last_saved=1161892424.08 mailto_author=0 name=newbie007 quicklinks= remember_last_visit=0 remember_me=1 show_fancy_diff=1 show_nonexist_qm=0 show_page_trail=1 show_toolbar=1 show_topbottom=0 subscribed_pages= theme_name=woodpecker tz_offset=0 want_trivial=0 wikiname_add_spaces=0 }}}
Chris Qie
{{{> grep Chris Qie * grep: Qie: No such file or directory 1135071506.45.38548:name=Chris
> cat 1135071506.45.38548 # Data saved '2005-12-20 17:38:59' for id '1135071506.45.38548' css_url= datetime_fmt= disabled=0 edit_on_doubleclick=0 edit_rows=20 email=[email protected] enc_password={SHA}vf9OeRd3FZbKocQI+iIyEG/qstk= language= last_saved=1135071539.39 name=Chris quicklinks= remember_last_visit=0 remember_me=1 show_fancy_diff=1 show_fancy_links=1 show_nonexist_qm=0 show_page_trail=1 show_toolbar=1 show_topbottom=0 subscribed_pages= theme_name=modern tz_offset=0 want_trivial=0 wikiname_add_spaces=0 }}}
截屏
- attachment:061031-spamer_768x336_scrot.png
attachment:061031-spam_844x656_scrot.png