googleで検索してから ｺﾒﾝﾄspamがくるので ﾊｼﾞｸ(´ー｀)ﾊﾞﾘﾊﾞﾘﾊﾞﾘ
[root@ns root]# grep archives/000296.html /var/log/httpd/www.lancard.com-access_log.20060301
85.255.113.183 - - [01/Mar/2006:00:07:08 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.google.com/search?hl=en&q=inurl%3A%22archives%2F000296%2Ehtml%22&hl=en&lr=en&start=google_page&num=100&sa=N&filter=0" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.183 - - [01/Mar/2006:00:07:09 +0900] "POST /mt/mt-comments.cgi HTTP/1.1" 200 9161 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.183 - - [01/Mar/2006:00:07:11 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.182 - - [01/Mar/2006:00:22:02 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.google.com/search?hl=en&q=inurl%3A%22archives%2F000296%2Ehtml%22&hl=en&lr=en&start=google_page&num=100&sa=N&filter=0" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.182 - - [01/Mar/2006:00:22:03 +0900] "POST /mt/mt-comments.cgi HTTP/1.1" 200 9503 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.182 - - [01/Mar/2006:00:22:05 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.189 - - [01/Mar/2006:00:35:50 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.google.com/search?hl=en&q=inurl%3A%22archives%2F000296%2Ehtml%22&hl=en&lr=en&start=google_page&num=100&sa=N&filter=0" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.189 - - [01/Mar/2006:00:35:51 +0900] "POST /mt/mt-comments.cgi HTTP/1.1" 200 9635 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.189 - - [01/Mar/2006:00:35:53 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.182 - - [01/Mar/2006:00:49:22 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.google.com/search?hl=en&q=inurl%3A%22archives%2F000296%2Ehtml%22&hl=en&lr=en&start=google_page&num=100&sa=N&filter=0" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.182 - - [01/Mar/2006:00:49:23 +0900] "POST /mt/mt-comments.cgi HTTP/1.1" 200 9564 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.182 - - [01/Mar/2006:00:49:25 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.183 - - [01/Mar/2006:01:03:41 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.google.com/search?hl=en&q=inurl%3A%22archives%2F000296%2Ehtml%22&hl=en&lr=en&start=google_page&num=100&sa=N&filter=0" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.183 - - [01/Mar/2006:01:03:41 +0900] "POST /mt/mt-comments.cgi HTTP/1.1" 200 9310 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
85.255.113.183 - - [01/Mar/2006:01:03:43 +0900] "GET /archives/000296.html HTTP/1.1" 200 12989 "http://www.lancard.com/archives/000296.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en)"
checkbox追加したり、ACCEPT_LANGUAGEで絞ったりしてるのでｺﾒﾝﾄspamについては命中率はほぼ0なんですが、spammerの巣として検出されたIPｱﾄﾞﾚｽは弾きﾘｽﾄ行き(´ー｀)
Posted by minemaz at 2006年03月01日 16:02