::-- ZoomQuiet [2006-11-17 02:02:38]
Contents
1. Spamer无奈攻击
buhaoyisi
- 只能攻击唯一的允许自由编辑页面了：
1.1. 日志分析
{{{/var/log/apache> tail -n 22500 httpd-access.log | grep WoodpeckerAclDefine | grep Discuss | grep 17/Nov/2006 219.142.118.11 - - [17/Nov/2006:06:24:23 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.0" 200 10875 "-" "Mozilla/5.0 (compatible; iaskspider/1.0; MSIE 6.0)" 221.217.118.196 - - [17/Nov/2006:09:55:31 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11949 "http://wiki.woodpecker.org.cn/moin/woodpecker-log/2006-04-07" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0" 221.217.118.196 - - [17/Nov/2006:09:55:40 +0800] "GET /moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text HTTP/1.1" 200 8723 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0" 221.217.118.196 - - [17/Nov/2006:09:55:50 +0800] "POST /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11763 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0" ... }}}
这货终于学会使用文本编辑了,而且也感觉到使用IE 阅读MoinMoin 页面无法获得最佳体验,从 IE6.0 换成 FF2.0 才进行快速Spam 的!
1.2. IP 查詢
- 看来是单位里?!
- 查询结果1：北京市 网通(通州区)
- 查询结果2：北京市通州区 网通