06-10-31.Spamer第3次袭来!

• 注册为 suckmydick 的东西

  • 20:31 注册后就开始乱改,22:10左右被发现,22:15 发布警报;22:30清除注册名;在[wiki:andelf andelf]和QiangningHong 的协助下 22:43 完成所有污染页面的清除,但是部分附件被恶意删除不能恢复!

    • 倡议追踪此人,进行网络鄙视!!!

日志

• 根据 Apache 的日志记录:{{{219.142.250.46 - - [31/Oct/2006:23:04:26 +0800] "GET /moin/UsenetTroll?action=info HTTP/1.1" 200 21694 "http://wiki.woodpecker.org.cn/moin/UsenetTroll" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7"

219.142.250.46 - - [31/Oct/2006:23:04:30 +0800] "GET /moin/UsenetTroll?action=AttachFile&do=del&target=b_9F9D4FFB7F3B520D.jpg HTTP/1.1" 200 11240 "http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=info" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7" 219.142.250.46 - - [31/Oct/2006:23:04:37 +0800] "GET /moin/FindPage HTTP/1.1" 200 19071 "http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=AttachFile&do=del&target=b_9F9D4FFB7F3B520D.jpg" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7" 219.142.250.46 - - [31/Oct/2006:23:08:05 +0800] "GET /moin/UsenetTroll HTTP/1.1" 200 18568 "http://wiki.woodpecker.org.cn/moin/RecentChanges" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7" 219.142.250.46 - - [31/Oct/2006:23:08:08 +0800] "GET /moin/UsenetTroll?action=info HTTP/1.1" 200 21983 "http://wiki.woodpecker.org.cn/moin/UsenetTroll" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7" 219.142.250.46 - - [31/Oct/2006:23:09:44 +0800] "GET /moin/UsenetTroll?action=diff&rev2=12&rev1=10 HTTP/1.1" 200 27499 "http://wiki.woodpecker.org.cn/moin/UsenetTroll?action=info" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.0.7) Gecko/20061008 Firefox/1.5.0.7" }}}

• 居然是使用 FireFox 的东西!!! 访问IP 是 219.142.250.46

细节

• # Data saved '2006-10-31 20:31:25' for id '1162297883.76.32758'
  aliasname=
  css_url=
  date_fmt=
  datetime_fmt=
  disabled=0
  edit_on_doubleclick=0
  edit_rows=20
  editor_default=text
  editor_ui=freechoice
  [email protected]
  enc_password={SHA}5HxYCc1Ml/whq8zt/Yc6TKjZNkk=
  language=
  last_saved=1162297885.33
  mailto_author=0
  name=suckmydick
  quicklinks=
  remember_last_visit=0
  remember_me=1
  show_fancy_diff=1
  show_nonexist_qm=0
  show_page_trail=1
  show_toolbar=1
  show_topbottom=0
  subscribed_pages=
  theme_name=woodpecker
  tz_offset=0
  want_trivial=0
  wikiname_add_spaces=0

• attachment:061031-spamer_768x336_scrot.png

attachment:061031-spam_844x656_scrot.png