全球主机交流论坛

标题: 求分析 [打印本页]
作者: nbweb    时间: 2012-2-27 22:56
标题: 求分析
日志里的
这ip是美国的，好奇的是有个邮箱，肯定是国人的
ezooms.bot@gmail.com
  1. 208.115.113.84 - - [27/Feb/2012:01:32:38 +0800] "GET /reads.php?key=645718358&v1_v2=43616466 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  2. 208.115.113.84 - - [27/Feb/2012:01:32:39 +0800] "GET /wmlists.php?key=1866420286&v1_v2=1136987922 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  3. 208.115.113.84 - - [27/Feb/2012:01:32:41 +0800] "GET /wltags.php?key=276370123&v1_v2=1384272018 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  4. 208.115.113.84 - - [27/Feb/2012:01:32:42 +0800] "GET /posts.php?key=1019218822&v1_v2=1096745077 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  5. 208.115.113.84 - - [27/Feb/2012:01:32:43 +0800] "GET /mhtags.php?key=2017482046&v1_v2=662411584 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  6. 208.115.113.84 - - [27/Feb/2012:01:32:45 +0800] "GET /reads.php?key=725749507&v1_v2=1712150675 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  7. 208.115.113.84 - - [27/Feb/2012:01:32:46 +0800] "GET /wmlists.php?key=19046&v1_v2=29095 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  8. 208.115.113.84 - - [27/Feb/2012:01:32:46 +0800] "GET /mhtags.php?key=953372361&v1_v2=739021366 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  9. 208.115.113.84 - - [27/Feb/2012:01:32:47 +0800] "GET /wmlists.php?key=665321667&v1_v2=1878484695 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  10. 208.115.113.84 - - [27/Feb/2012:01:32:48 +0800] "GET /wmlists.php?key=430748939&v1_v2=639406496 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  11. 208.115.113.84 - - [27/Feb/2012:01:32:49 +0800] "GET /posts.php?key=32408&v1_v2=26353 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  12. 208.115.113.84 - - [27/Feb/2012:01:32:50 +0800] "GET /wmlists.php?key=414129146&v1_v2=453691822 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  13. 208.115.113.84 - - [27/Feb/2012:01:32:51 +0800] "GET /wmlists.php?key=62978713&v1_v2=1398622066 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  14. 208.115.113.84 - - [27/Feb/2012:01:32:51 +0800] "GET /wltags.php?key=977062265&v1_v2=983365273 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  15. 208.115.113.84 - - [27/Feb/2012:01:32:52 +0800] "GET /mhtags.php?key=1120358423&v1_v2=2133103398 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  16. 208.115.113.84 - - [27/Feb/2012:01:32:53 +0800] "GET /posts.php?key=315394623&v1_v2=979194294 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  17. 208.115.113.84 - - [27/Feb/2012:01:32:54 +0800] "GET /reads.php?key=1640282534&v1_v2=1084061619 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  18. 208.115.113.84 - - [27/Feb/2012:01:32:54 +0800] "GET /wltags.php?key=288014668&v1_v2=359066388 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  19. 208.115.113.84 - - [27/Feb/2012:01:32:55 +0800] "GET /mhtags.php?key=1275256431&v1_v2=829358247 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  20. 208.115.113.84 - - [27/Feb/2012:01:32:56 +0800] "GET /mhtags.php?key=1957601417&v1_v2=755142603 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
  21. 208.115.113.84 - - [27/Feb/2012:01:32:57 +0800] "GET /wltags.php?key=1210418897&v1_v2=980913338 HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Ezooms/1.0; ezooms.bot@gmail.com)"
复制代码
作者: nbweb    时间: 2012-2-27 22:57
之前被人植入过php病毒，后来发现了，把那几个php给删掉了，现在还来
作者: Kokgog    时间: 2012-2-27 22:59
不用分析, 很多开源的爬虫软件自定义的时候都会在useragent里包含email........
作者: nbweb    时间: 2012-2-27 23:00
http://bbs.chinaz.com/Club/thread-3079403-1-1.html?userid=-1&extParms=

这里也有人提出
作者: 我是人    时间: 2012-2-27 23:01
听说是dotnetdotcom.org的杰作。。。
作者: 0x59    时间: 2012-2-28 02:20
机器人？？？？？



欢迎光临 全球主机交流论坛 (https://fd.vvwvv.eu.org/) Powered by Discuz! X3.4