I found several probes into my cgi-bin directory by checking my access log (not really unusual) but something caught my eye. I don't use perl with my system and I found a formmail.log which contained a number of entries. See below:
Mon Sep 23 14:55:20 2002, 200.84.101.101, Tue Sep 24 08:00:31 2002, 206.111.110.4, Tue Sep 24 08:49:07 2002, 65.71.104.207, Fri Sep 27 17:56:23 2002, 172.141.234.46, Sun Sep 29 17:15:25 2002, 209.26.181.94, Mon Sep 30 13:08:52 2002, 65.125.52.130, Tue Oct 1 14:43:06 2002, 63.229.207.218, Tue Oct 1 23:50:41 2002, 62.1.0.104, Wed Oct 2 10:42:56 2002, 208.187.9.248, Wed Oct 2 10:42:57 2002, 208.187.9.248, It appears that these were just a fishing expedition but this could represent a significent way for spammers to run mail through your or my system. Can anyone comment why I would have a formmail.log when I don't use formmail.pl???? Dave Culbertson Protection provided by Ya-Right Protection Services Copyright: � 2002 Ya-Right Network Protection Services Version: 2.01 Server Professional Last Updated: Fri, Sep 27 12:01:43 PM EST 2002 Scanning for 107,387 viruses, trojans and variants. ------------------------------------------------------- To unsubscribe please go to http://www.sambar.ch/list/
