##language:zh
#pragma section-numbers on
'''

'''
::-- ZoomQuiet [<<DateTime(2006-11-17T02:02:38Z)>>]
<<TableOfContents>>

= Spamer无奈攻击 =
 * `buhaoyisi`
 * 只能攻击唯一的允许自由编辑页面了：
  * [[http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss?action=recall&rev=4|WoodpeckerAclDefine/Discuss 版本4]]
== 日志分析 ==
{{{/var/log/apache> tail -n 22500 httpd-access.log | grep WoodpeckerAclDefine | grep Discuss | grep 17/Nov/2006
219.142.118.11 - - [17/Nov/2006:06:24:23 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.0" 200 10875 "-" "Mozilla/5.0 (compatible; iaskspider/1.0; MSIE 6.0)"
221.217.118.196 - - [17/Nov/2006:09:55:31 +0800] "GET /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11949 "http://wiki.woodpecker.org.cn/moin/woodpecker-log/2006-04-07" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0"
221.217.118.196 - - [17/Nov/2006:09:55:40 +0800] "GET /moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text HTTP/1.1" 200 8723 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0"
221.217.118.196 - - [17/Nov/2006:09:55:50 +0800] "POST /moin/WoodpeckerAclDefine/Discuss HTTP/1.1" 200 11763 "http://wiki.woodpecker.org.cn/moin/WoodpeckerAclDefine/Discuss?action=edit&editor=text" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1) Gecko/20061010 Firefox/2.0"
...
}}}
 * 这货终于学会使用文本编辑了,而且也感觉到使用IE 阅读MoinMoin 页面无法获得最佳体验,从 IE6.0 换成 FF2.0 才进行快速Spam 的!

== IP 查詢 ==
 * 看来是单位里?!
    * 查询结果1：北京市 网通(通州区)
    * 查询结果2：北京市通州区 网通

= 反馈 =