Differences between revisions 1 and 3 (spanning 2 versions)
⇤ ← Revision 1 as of 2006-11-17 02:02:38 →
Size: 369
Editor: ZoomQuiet
Comment:
← Revision 3 as of 2009-12-25 07:10:18 → ⇥
Size: 1815
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 6: Line 6:
::-- ZoomQuiet [[[DateTime(2006-11-17T02:02:38Z)]]]
[[TableOfContents]]		 ::-- ZoomQuiet [<<DateTime(2006-11-17T02:02:38Z)>>]
<<TableOfContents>>
Line 12: Line 12:
  * [http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss?action=recall&rev=4 WoodpeckerAclDefine/Discuss 版本4]   * [[http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss?action=recall&rev=4|WoodpeckerAclDefine/Discuss 版本4]]
== 日志分析 ==
{{{/var/log/apache> tail -n 22500 httpd-access.log | grep WoodpeckerAclDefine | grep Discuss | grep 17/Nov/2006
219.142.118.11 - - [17/Nov/2006:06:24:23 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.0" 200 10875 "-" "Mozilla/5.0 (compatible; iaskspider/1.0; MSIE 6.0)"
221.217.118.196 - - [17/Nov/2006:09:55:31 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11949 "http://wiki.woodpecker.org.cn/moin/woodpecker-log/2006-04-07" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0"
221.217.118.196 - - [17/Nov/2006:09:55:40 +0800] "GET /moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text HTTP/1.1" 200 8723 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0"
221.217.118.196 - - [17/Nov/2006:09:55:50 +0800] "POST /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11763 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0"
...
}}}
 * 这货终于学会使用文本编辑了,而且也感觉到使用IE 阅读MoinMoin 页面无法获得最佳体验,从 IE6.0 换成 FF2.0 才进行快速Spam 的!

== IP 查詢 ==
 * 看来是单位里?!
    * 查询结果1：北京市 网通(通州区)
    * 查询结果2：北京市通州区 网通

::-- ZoomQuiet [2006-11-17 02:02:38]

Contents

  1. Spamer无奈攻击
    1. 日志分析
    2. IP 查詢
  2. 反馈

1. Spamer无奈攻击

1.1. 日志分析

{{{/var/log/apache> tail -n 22500 httpd-access.log | grep WoodpeckerAclDefine | grep Discuss | grep 17/Nov/2006 219.142.118.11 - - [17/Nov/2006:06:24:23 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.0" 200 10875 "-" "Mozilla/5.0 (compatible; iaskspider/1.0; MSIE 6.0)" 221.217.118.196 - - [17/Nov/2006:09:55:31 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11949 "http://wiki.woodpecker.org.cn/moin/woodpecker-log/2006-04-07" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0" 221.217.118.196 - - [17/Nov/2006:09:55:40 +0800] "GET /moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text HTTP/1.1" 200 8723 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0" 221.217.118.196 - - [17/Nov/2006:09:55:50 +0800] "POST /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11763 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0" ... }}}

  • 这货终于学会使用文本编辑了,而且也感觉到使用IE 阅读MoinMoin 页面无法获得最佳体验,从 IE6.0 换成 FF2.0 才进行快速Spam 的!

1.2. IP 查詢

  • 看来是单位里?!
    • 查询结果1：北京市 网通(通州区)
    • 查询结果2：北京市通州区 网通

2. 反馈

woodpecker-log/2006-11-17 (last edited 2009-12-25 07:10:18 by localhost)