用ASP.NET MVC阻止ZmEu攻击

<IfModule mod_rewrite.c>
RewriteENGIne on
RewriteCond %{requEST_URI} !^/path/to/your/abusefile.php
RewriteCond %{http_user_ageNT} (.*)ZmEu(.*)
RewriteRule .* http://www.yourdomain.com/path/to/your/abusefile.php [R=301,L]
</IfModule>

对于 my other one的另一个答案…这一个专门阻止Elmah记录由ZmEu生成的404错误,同时让您的其余站点行为不变.这可能比将消息直接传递给黑客更不明显.

您可以控制Elmah在various ways中登录的内容,其一种方法是将其添加到Global.asax中

void ErrorLog_Filtering(object sender,ExceptionFilterEventArgs E)
{
    if (e.Exception.GetBaseException() is httpException)
    {
        httpException httpEx = (httpException)e.Exception.GetBaseException();
        if (httpEx.GethttpCode() == 404)
        {
            if (request.UserAgent.Contains("ZmEu"))
            {
                // stop Elmah from logging it
                e.Dismiss();
                // log it somewhere else
                logger.InfoFormat("ZmEu request detected from IP {0} at address {1}",request.UserHostAddress,request.Url);
            }           
        }
    }
}

要触发此事件,您需要从项目中引用Elmah DLL,并使用Elmah添加;到您的Global.asax.cs的顶部.

行logger.InfoFormat的行假定您正在使用log4net.如果没有,请将其更改为其他内容.