RE: [cobalt-users] formmail.pl

["Phil Beynon" <Infolink@xxxxxxxxxxxxxxx>]

> Does this log file entry mean someone used my formmail.pl or attempted to
> use it?
>
> 66.19.187.34 - - [12/Apr/2002:11:08:03 -0500] "GET
> /cgi-bin/formmail.pl?recipient=piezzaha@xxxxxxx&subject=http://www
> .yetiservices.com/cgi-bin/formmail.pl&email=mumu7@xxxxxxxx&=http:/
> /www.yetiservices.com/cgi-bin/formmail.pl
> HTTP/1.1" 404 657 "-" "Microsoft URL Control - 6.00.8862"

Yes that's exactly what it means. You will find 4 log entries in all for
this probe - 2 looking for cgi-bin using .pl and .cgi extensions & 2 looking
for cgi-local using .pl and .cgi extensions.
If a probe is successful your site address gets into a database somewhere
which is being shared amongst these spammers.

Since on the one above your server returned a 404 error this shows it was
not found.

Phil


http://www.diygear.com THE Online DIY Toolstore For DIY & Business
Infolink Electronic Systems Ltd. Suppliers of:- PC based Computer Systems,
Peripheral & Hardware, Plus Web Design & Cobalt Raq4 Hosting Solutions
Contact the Sales desk at  infolink@xxxxxxxxxxxxxxx or Tel 0121 458 4894
(office) 0121 441 3558 (home)