RE: [cobalt-users] Can anyone explain this log to me

["Peter Masloch" <peter@xxxxxxxxxxx>]

Spamers are using a scanner for formmail. They can scan
several IP subnets in minutes. I have it in my logfiles every day
and i don't have formmail.
Peter
 

>Thanks Dan for the web site address - I'm making detailed 
>notes and removing the FormMail script straight away.
>
>I can't believe that I only installed the script yesterday and 
>someone is trying to get at it already.
>
>I suppose its a matter of knowing where to go for information 
>and advice most of the time in order to get things correct.
>
>Thanks again
>
>Ray Healy
>
>
>----- Original Message -----
>From: "Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>
>To: <cobalt-users@xxxxxxxxxxxxxxx>
>Sent: Tuesday, June 11, 2002 7:32 PM
>Subject: RE: [cobalt-users] Can anyone explain this log to me
>
>
>> >
>> > Can any one explain why this is in my web.log for my site.
>> >
>> > Perhaps it is OK but I justv wanted some advice as I have just 
>> > installed FormMail and these lines refer to it with an unknown 
>> > e-mail address.
>> >
>> > ------------
>> > 127.0.0.1 - - [10/Jun/2002:20:00:01 +0100] "HEAD / HTTP" 200 0 "-" 
>> > "-"
>> >
>> > 206.148.146.83 - - [10/Jun/2002:20:11:07 +0100] "GET 
>> > /cgi-bin/formmail.cgi?recipient=tupperhorse@xxxxxxx&subject=pl
>> > ease%20close%2 
>> > 0your%20form&email=gwillytrice@xxxxxxxxxxxx&=http://212.84.175
>> > .181/cgi-bin/f
>> > ormmail.cgi HTTP/1.1" 404 657 "-" "Microsoft URL Control - 
>> > 6.00.8862"
>> >
>>
>> http://www.monkeys.com/anti-spam/filtering/formmail.html
>> --
>> Dan Kriwitsky
>> 
>> Please reply to the list only. Offlist replies are not read.
>>
>>
>> _______________________________________________
>> cobalt-users mailing list
>> cobalt-users@xxxxxxxxxxxxxxx
>> To Subscribe or Unsubscribe, please go to: 
>> http://list.cobalt.com/mailman/listinfo/cobalt-users
>>
>>
>
>_______________________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To Subscribe or Unsubscribe, please go to: 
>http://list.cobalt.com/mailman/listinfo/cobalt->users
>
>