关于进入MC百科需要安全验证的情况说明

显示全部楼层 · 发表于 2020-4-28 15:02:56

在 2020年4月28日 11:53 ~ 14:07，MC百科再一次的遭受了CC攻击，根据服务器日志初步判断，本次攻击与 4月7日、4月8日、4月10日、4月11日、4月12日攻击百科至瘫痪者是同一拨势力。

序号	时间	站点	用户IP	CDNIP	延迟	字节数	状态码	请求方式	页面路径	referer	UA
1	2020/4/28 11:53	www.mcmod.cn	243.162.78.157, 26.30.214.231,41.203.240.50, 162.158.155.96	162.158.155.96	2257750	671135	200	GET	/	https://google.com	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
2	2020/4/28 11:53	www.mcmod.cn	248.130.19.222, 153.249.42.134,91.217.202.174, 172.68.182.38	172.68.182.38	2383996	671137	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0
3	2020/4/28 11:53	www.mcmod.cn	174.111.237.253, 3.78.88.209,117.239.240.202, 162.158.227.84	162.158.227.84	2402225	671147	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763
4	2020/4/28 11:53	www.mcmod.cn	132.71.150.199, 34.241.35.80,185.43.72.179, 188.114.111.225	188.114.111.225	2102553	671159	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Linux; Android 5.0.2; SAMSUNG SM-T550 Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.3 Chrome/38.0.2125.102 Safari/537.36
5	2020/4/28 11:53	www.mcmod.cn	184.119.78.228, 218.229.242.245,159.192.142.42, 172.69.134.103	172.69.134.103	2170576	671146	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trident/6.0; IEMobile/10.0; ARM; Touch; Microsoft; Lumia 950)
6	2020/4/28 11:53	www.mcmod.cn	158.150.8.256, 7.103.235.183,134.249.165.49, 172.68.238.140	172.68.238.140	2302610	671234	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36
7	2020/4/28 11:53	www.mcmod.cn	43.2.151.169, 217.11.247.112,81.163.60.138, 162.158.89.95	162.158.89.95	2186416	671140	200	GET	/	https://qq.com	Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36
8	2020/4/28 11:53	www.mcmod.cn	25.58.160.247, 198.240.127.254,183.89.100.236, 172.68.6.26	172.68.6.26	2175999	671180	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (X11; Linux x86_64; rv:69.0) Gecko/20100101 Firefox/69.0
9	2020/4/28 11:53	www.mcmod.cn	232.242.179.229, 166.55.249.216,61.8.78.130, 162.158.167.182	162.158.167.182	2244425	671134	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.87 Safari/537.36
10	2020/4/28 11:53	www.mcmod.cn	156.149.140.7, 30.47.131.52,36.94.23.154, 162.158.165.86	162.158.165.86	2519300	671144	200	GET	/	https://gmail.com	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:69.0) Gecko/20100101 Firefox/69.0
11	2020/4/28 11:53	www.mcmod.cn	215.39.170.250, 39.100.0.179,91.217.42.64, 172.68.182.170	172.68.182.170	2359033	671146	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Linux; Android 7.0; Pixel C Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/52.0.2743.98 Safari/537.36
12	2020/4/28 11:53	www.mcmod.cn	200.73.138.142, 237.224.150.69,139.224.73.182, 115.231.186.48	115.231.186.48	2471505	671186	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.1 Safari/605.1.15
13	2020/4/28 11:53	www.mcmod.cn	146.244.115.73, 79.192.98.197,202.80.231.67, 172.68.234.150	172.68.234.150	2408623	671219	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Linux; U; Android 7.0; en-us; MI 5 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/53.0.2785.146 Mobile Safari/537.36 XiaoMi/MiuiBrowser/9.0.3
14	2020/4/28 11:53	www.mcmod.cn	154.234.34.105, 183.56.69.22,101.108.126.171, 172.68.106.104	172.68.106.104	2544383	671189	200	GET	/	https://yahoo.com	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393
15	2020/4/28 11:53	www.mcmod.cn	64.250.223.57, 111.49.173.170,168.121.43.214, 198.41.230.74	198.41.230.74	2540156	671137	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36
16	2020/4/28 11:53	www.mcmod.cn	191.0.230.30, 198.30.69.217,5.160.85.2, 162.158.94.164	162.158.94.164	2416066	671171	200	GET	/	https://google.com	Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36
17	2020/4/28 11:53	www.mcmod.cn	44.70.120.47, 5.199.233.97,167.71.222.32, 162.158.165.86	162.158.165.86	2249273	671137	200	GET	/	https://yahoo.com	Mozilla/5.0 (Windows Phone 10.0; Android 4.2.1; Microsoft; RM-1127_16056) AppleWebKit/537.36(KHTML, like Gecko) Chrome/42.0.2311.135 Mobile Safari/537.36 Edge/12.10536
18	2020/4/28 11:53	www.mcmod.cn	255.90.73.120, 177.140.117.106,167.71.222.32, 162.158.167.162	162.158.167.162	2295342	671150	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Apple-iPhone7C2/1202.466; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A543 Safari/419.3
19	2020/4/28 11:53	www.mcmod.cn	34.61.212.213, 117.199.195.161,180.180.175.70, 172.68.106.104	172.68.106.104	2285811	671161	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Linux; Android 5.0.2; LG-V410/V41020c Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/34.0.1847.118 Safari/537.36
20	2020/4/28 11:53	www.mcmod.cn	124.14.7.127, 77.91.228.235,209.141.46.133, 162.158.246.38	162.158.246.38	2429598	671119	200	GET	/	https://gmail.com	Mozilla/5.0 (Linux; Android 5.0.2; SAMSUNG SM-T550 Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.3 Chrome/38.0.2125.102 Safari/537.36
21	2020/4/28 11:53	www.mcmod.cn	89.86.160.172, 115.138.60.125,103.46.233.45, 162.158.227.42	162.158.227.42	2710407	671129	200	GET	/	https://youtube.com	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0
22	2020/4/28 11:53	www.mcmod.cn	93.59.25.226, 197.1.248.77,118.174.232.234, 172.68.106.8	172.68.106.8	2813165	671111	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:70.0) Gecko/20100101 Firefox/70.0
23	2020/4/28 11:53	www.mcmod.cn	101.53.170.254, 162.126.83.94,45.184.219.254, 172.69.3.146	172.69.3.146	2807712	671159	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
24	2020/4/28 11:53	www.mcmod.cn	8.191.199.102, 42.34.188.155,179.108.81.76, 172.68.24.172	172.68.24.172	3094384	671137	200	GET	/	https://baidu.com	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.70 Safari/537.36
25	2020/4/28 11:53	www.mcmod.cn	199.166.216.178, 109.35.104.20,82.200.67.242, 162.158.183.15	162.158.183.15	3062764	671135	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36
26	2020/4/28 11:53	www.mcmod.cn	42.197.127.152, 56.25.205.238,167.71.222.16, 172.68.146.204	172.68.146.204	3082645	671125	200	GET	/	https://www.mcmod.cn/	Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
27	2020/4/28 11:53	www.mcmod.cn	135.69.159.209, 65.191.163.136,113.161.68.146, 172.68.255.156	172.68.255.156	3051957	671140	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Linux; Android 6.0.1; SHIELD Tablet K1 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/55.0.2883.91 Safari/537.36
28	2020/4/28 11:53	www.mcmod.cn	118.74.26.118, 148.254.228.11,119.82.253.210, 172.68.253.189	172.68.253.189	3119512	671183	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36
29	2020/4/28 11:53	www.mcmod.cn	154.51.250.238, 92.50.132.170,177.247.14.42, 172.69.6.98	172.69.6.98	3128246	671186	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-G570Y Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/4.0 Chrome/44.0.2403.133 Mobile Safari/537.36
30	2020/4/28 11:53	www.mcmod.cn	65.46.174.227, 177.203.138.160,103.70.79.3, 162.158.167.182	162.158.167.182	3021563	671210	200	GET	/	https://google.com	Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G955U Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36
31	2020/4/28 11:53	www.mcmod.cn	30.53.118.214, 37.207.127.175,198.98.54.241, 162.158.62.171	162.158.62.171	3034457	671189	200	GET	/	https://yahoo.com	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.1 Safari/605.1.15
32	2020/4/28 11:53	www.mcmod.cn	96.33.256.23, 209.210.168.49,3.223.135.199, 172.69.63.205	172.69.63.205	3104729	671132	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Linux; Android 6.0.1; SM-G920V Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.36
33	2020/4/28 11:53	www.mcmod.cn	65.12.24.104, 55.19.65.115,173.208.198.218, 172.68.150.86	172.68.150.86	3115966	671162	200	GET	/	https://yahoo.com	Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
34	2020/4/28 11:53	www.mcmod.cn	213.23.135.73, 84.47.228.236,186.47.17.70, 162.158.224.148	162.158.224.148	3157858	671138	200	GET	/	https://google.com	Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
35	2020/4/28 11:53	www.mcmod.cn	133.210.154.173, 172.254.93.125,45.236.170.6, 198.41.226.110	198.41.226.110	3204625	671182	200	GET	/	https://reddit.com	Mozilla/5.0 (Linux; U; Android 7.0; en-us; MI 5 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/53.0.2785.146 Mobile Safari/537.36 XiaoMi/MiuiBrowser/9.0.3
36	2020/4/28 11:53	www.mcmod.cn	86.228.45.198, 95.124.180.239,178.47.139.151, 172.68.182.170	172.68.182.170	3099297	671135	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0
37	2020/4/28 11:53	www.mcmod.cn	101.166.232.203, 147.102.226.163,113.53.29.218, 172.68.106.8	172.68.106.8	3083030	671162	200	GET	/	https://yahoo.com	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0
38	2020/4/28 11:53	www.mcmod.cn	90.177.57.96, 55.210.225.207,103.148.195.11, 172.69.134.55	172.69.134.55	3171382	671158	200	GET	/	https://www.mcmod.cn/
39	2020/4/28 11:53	www.mcmod.cn	21.101.250.149, 236.137.27.102,103.89.235.214, 162.158.227.14	162.158.227.14	3228468	671162	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
40	2020/4/28 11:53	www.mcmod.cn	150.211.179.219, 105.179.17.21,120.89.46.109, 162.158.178.253	162.158.178.253	3153919	671156	200	GET	/	https://qq.com	Mozilla/5.0 (Linux; Android 7.0; SM-A310F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36 OPR/42.7.2246.114996
41	2020/4/28 11:53	www.mcmod.cn	190.97.152.50, 145.252.97.4,163.172.190.160, 108.162.229.18	108.162.229.18	3217937	671204	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
42	2020/4/28 11:53	www.mcmod.cn	190.149.97.177, 84.44.239.101,42.115.38.176, 162.158.217.44	162.158.217.44	3613055	671132	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36
43	2020/4/28 11:53	www.mcmod.cn	216.3.201.88, 215.235.199.210,183.195.106.118, 112.25.90.36	112.25.90.36	3526044	671159	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36
44	2020/4/28 11:53	www.mcmod.cn	124.47.158.80, 40.156.223.45,103.220.206.110, 172.69.218.142	172.69.218.142	3515660	671189	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.51.2 (KHTML, like Gecko) OPiOS/10.2.0.93022 Mobile/11D257 Safari/9537.53
45	2020/4/28 11:53	www.mcmod.cn	217.233.13.8, 191.9.242.93,180.183.229.32, 172.68.6.20	172.68.6.20	3411072	671120	200	GET	/	https://google.com	Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:70.0) Gecko/20100101 Firefox/70.0
46	2020/4/28 11:53	www.mcmod.cn	159.106.51.165, 171.241.124.242,103.142.110.130, 162.158.165.20	162.158.165.20	3475946	671182	200	GET	/	https://yahoo.com	Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.3
47	2020/4/28 11:53	www.mcmod.cn	101.216.92.72, 56.24.82.242,177.55.207.38, 162.158.193.138	162.158.193.138	3629143	671294	200	GET	/	https://baidu.com	Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
48	2020/4/28 11:53	www.mcmod.cn	82.55.44.208, 107.193.136.32,94.73.239.124, 172.68.245.77	172.68.245.77	3663338	671165	200	GET	/	https://facebook.com
49	2020/4/28 11:53	www.mcmod.cn	103.173.108.164, 139.142.159.150,200.216.227.141, 172.68.25.224	172.68.25.224	3610028	671138	200	GET	/	https://www.mcmod.cn/	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36
50	2020/4/28 11:53	www.mcmod.cn	107.219.223.50, 117.256.104.200,82.200.67.242, 162.158.183.179	162.158.183.179	3685885	671156	200	GET	/	https://youtube.com	Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G955U Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36

因此长期开启安全验证策略是明智之举。

虽然绝对安全是不存在的，但安全验证能在一定程度上缓解CC攻击的威力，增加攻击的成本。

安全验证的副作用：

所有人入站都需要进行安检，非浏览器的请求会被拒绝，可能会出现“网页开小差”这类高级安检（需要手动点击“刷新”）；
如果在正常访问时安全验证过期，在提交编辑、短评时可能会提示“服务器内部错误”，此时需要访问任意页面重新验证；

请大家不要惊慌，MC百科会持续长期运营下去，相信我们一定能挺过这一关的。

有任何问题请联系邮箱：

显示全部楼层 · 发表于 2020-4-28 15:12:21

支持。

显示全部楼层 · 发表于 2020-4-28 15:17:02

站长，加油！
他要是再继续的话可以报警！
我虽然没有什么能力，但是我还要为这个百科加油ヾ(◍°∇°◍)ﾉﾞ！

显示全部楼层 · 发表于 2020-4-28 15:36:44

不知道为什么要攻击MC的资源网站，前段时间curseforge也被攻击了，现在要验证码才能进，而且不知道什么原因，通常要输好几次，好麻烦。这些MC的资源网站有没有做错什么。。不说了，支持MC百科！！

显示全部楼层 · 发表于 2020-4-28 15:37:43

我说呢咋访问不了了，原来真被打了

显示全部楼层 · 发表于 2020-4-28 15:57:45

QQ酱75928 发表于 2020-4-28 15:17
站长，加油！
他要是再继续的话可以报警！
我虽然没有什么能力，但是我还要为这个百科加油ヾ(◍°∇°◍)ﾉ ...

这个月中旬被攻击时就已经报案了，提供了8G的日志文件，现在在等结果
但百科只有商业价值而没有商业内容，短期不能访问损失金额接近于0，所以我对案件的进展也不抱太大的期望…
也总不能为了找到攻击者而故意让百科挂掉几个月来增加损失吧 _(:з」∠)_
所以现在能做的就是增强自动化和预警，保证挂掉的第一时间让网站恢复正常访问

显示全部楼层 · 发表于 2020-4-28 16:09:53

重生是希望发表于 2020-4-28 15:57
这个月中旬被攻击时就已经报案了，提供了8G的日志文件，现在在等结果
但百科没有商业内容，短期不能访问损 ...

唔姆，呐抱一抱站长~o( =∩ω∩= )m

显示全部楼层 · 发表于 2020-4-28 17:35:16

好奇，上午不是一直开着安全验证吗

显示全部楼层 · 发表于 2020-4-28 17:41:05

wuzg 发表于 2020-4-28 17:35
好奇，上午不是一直开着安全验证吗

因为自12号以后就没有出现过无法访问的情况，所以放松了警惕，安全验证的副作用还是挺大的，昨天试探性的关闭了安全验证，结果今天就被打炸了…
原本甚至以为上亿的攻击拦截是误报，现在看来是真的了

显示全部楼层 · 发表于 2020-4-28 18:34:17

喵呜机加油啊

关于进入MC百科需要安全验证的情况说明

评分

评分

MC百科4周年庆典

1000天纪念勋章

娜迦勋章

微型红心勋章

微型黄心勋章

巫妖勋章

1K存储组件勋章

微型绿心勋章

微型蓝心勋章

4K存储组件勋章

本版最热

精品帖子

	B Color Image Link Quote Code Smilies @朋友高级模式百科目前不允许匿名发帖哦~ 请先 [ 登陆 ] 或 [ 注册 ] 吧~ 本版积分规则回帖后跳转到最后一页