Formmail Hits Gone Amok

**annie** · June 12, 2004

I renamed my secure formmail clone a while ago, because I got tired of the spam attempts.

Anyway, during the last 24 hours my error log has filled up with attempts to spam my non-existent formmail script.

Starting 11/Jun/2004:08:25:12 -0400 and probably not stopping yet.

The IP addresses are mostly unique, but the referrer is always the same: the front page of my site. And the UA is always just "-"

Just thought I'd issue a heads up. Somebody's made some new script or program.

So please make sure you don't have any scripts named formmail.cgi on your site! Rename your secure clone if you use one, and point your forms to the renamed script.

And I wondered: Do any of you have any definite information on this? My information is all speculation based on my grepped log file.

**annie** · June 12, 2004

I ran some of the IP's. Look like unintentional open proxies to me. Lots of them in Poland, some webservers and other servers.

**annie** · June 12, 2004

host-64-110-74-244.interpacket.net - - [31/May/2004:19:13:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

80.58.4.170 - - [31/May/2004:19:21:46 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

host-148-244-150-52.block.alestra.net.mx - - [06/Jun/2004:08:36:26 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

216-12-90-196.win.mvl.intelos.net - - [06/Jun/2004:11:50:56 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

redigersrv.sundhed.dk - - [10/Jun/2004:14:23:33 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

user68.footexperts.com - - [10/Jun/2004:14:57:05 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

65.120.143.230 - - [10/Jun/2004:15:27:21 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

zet1.ipee.pwr.wroc.pl - - [10/Jun/2004:18:19:43 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

redigersrv.sundhed.dk - - [11/Jun/2004:08:25:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

66.117.204.210 - - [11/Jun/2004:08:28:08 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

12.153.224.31 - - [11/Jun/2004:08:33:58 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

18.reverse233.fmcf.fr - - [11/Jun/2004:08:59:56 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

210.3.7.150 - - [11/Jun/2004:09:02:59 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

host-64-110-74-244.interpacket.net - - [11/Jun/2004:09:03:13 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

80-219-101-12.dclient.hispeed.ch - - [11/Jun/2004:09:08:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

redigersrv.sundhed.dk - - [11/Jun/2004:09:08:34 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

www.mcdaniel.hu - - [11/Jun/2004:09:13:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

153.110.132.10 - - [11/Jun/2004:09:17:53 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

acs-24-154-185-24.zoominternet.net - - [11/Jun/2004:09:22:10 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

66.234.235.202 - - [11/Jun/2004:09:32:17 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

66.46.219.102 - - [11/Jun/2004:09:35:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

142.131.18.2 - - [11/Jun/2004:09:46:39 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

134.159.124.202 - - [11/Jun/2004:09:49:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

acs-24-154-185-24.zoominternet.net - - [11/Jun/2004:09:58:07 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

198.188.248.84 - - [11/Jun/2004:09:59:58 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

211.248.99.252 - - [11/Jun/2004:10:17:44 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

81.172.179.155 - - [11/Jun/2004:10:20:58 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

67.107.199.99 - - [11/Jun/2004:10:26:38 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

141.158.65.245 - - [11/Jun/2004:10:31:50 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

62.65.78.139 - - [11/Jun/2004:10:35:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

206.144.16.56 - - [11/Jun/2004:10:46:37 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

c-24-15-203-208.client.comcast.net - - [11/Jun/2004:11:03:04 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "-" "-"

153.110.132.10 - - [11/Jun/2004:11:08:18 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

c-24-8-58-22.client.comcast.net - - [11/Jun/2004:11:10:50 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

fu-154-125.edit.ne.jp - - [11/Jun/2004:11:17:08 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

216.253.195.242 - - [11/Jun/2004:11:22:10 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

64.110.74.244 - - [11/Jun/2004:11:26:45 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

200-204-151-247.speedyterra.com.br - - [11/Jun/2004:11:41:51 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

213.156.52.229 - - [11/Jun/2004:11:44:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

66.192.30.22 - - [11/Jun/2004:11:56:32 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

user68.footexperts.com - - [11/Jun/2004:11:58:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

209.184.108.162 - - [11/Jun/2004:12:58:02 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

docsis130-48.menta.net - - [11/Jun/2004:13:15:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

200.48.218.179 - - [11/Jun/2004:13:31:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

209-87-78-2.client.dsl.net - - [11/Jun/2004:13:33:19 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1099 "referrer edited out" "-"

66-193-160-126.gen.twtelecom.net - - [11/Jun/2004:13:37:07 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

benayadi.sciences.univ-metz.fr - - [11/Jun/2004:13:40:04 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

68.17.24.126 - - [11/Jun/2004:13:42:39 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

67.107.199.99 - - [11/Jun/2004:13:47:32 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

136.242.141.219 - - [11/Jun/2004:13:50:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

host-64-110-74-244.interpacket.net - - [11/Jun/2004:13:53:46 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

exchange01.lksdesign.com - - [11/Jun/2004:13:56:19 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

68.33.114.102 - - [11/Jun/2004:13:57:02 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

ip-200-56-233-5-mx.marcatel.net.mx - - [11/Jun/2004:14:07:51 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

mailog.sapa.de - - [11/Jun/2004:14:10:52 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

c-24-8-58-22.client.comcast.net - - [11/Jun/2004:14:47:02 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1098 "referrer edited out" "-"

65.120.143.230 - - [11/Jun/2004:14:52:44 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

lpib.gva.es - - [11/Jun/2004:14:53:01 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

dpvc-162-83-93-38.fred.east.verizon.net - - [11/Jun/2004:14:55:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

dsl-200-78-10-171.prod-infinitum.com.mx - - [11/Jun/2004:15:00:05 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

81.134.152.211 - - [11/Jun/2004:15:05:00 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

nhs56.nestucca.k12.or.us - - [11/Jun/2004:15:05:13 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

nhs56.nestucca.k12.or.us - - [11/Jun/2004:15:10:11 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

nhs56.nestucca.k12.or.us - - [11/Jun/2004:15:20:13 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

64.240.156.246 - - [11/Jun/2004:15:25:13 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

67.107.199.99 - - [11/Jun/2004:15:31:45 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

69.30.133.25 - - [11/Jun/2004:15:34:25 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

lpib.gva.es - - [11/Jun/2004:15:38:58 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

207.87.211.126 - - [11/Jun/2004:15:41:33 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

rrcs-central-24-123-16-234.biz.rr.com - - [11/Jun/2004:15:48:09 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

0xc2c0d921.honxl.paisdn.tele.dk - - [11/Jun/2004:15:53:01 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

td9091e82.adsl.terralink.de - - [11/Jun/2004:15:57:15 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

zet1.ipee.pwr.wroc.pl - - [11/Jun/2004:16:01:37 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

66-193-160-126.gen.twtelecom.net - - [11/Jun/2004:16:11:20 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

host-148-244-150-52.block.alestra.net.mx - - [11/Jun/2004:16:14:40 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

nhs56.nestucca.k12.or.us - - [11/Jun/2004:16:25:42 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

Static-IP-cr20011812431.cable.net.co - - [11/Jun/2004:16:28:40 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

69.10.70.130 - - [11/Jun/2004:16:37:00 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

docsis130-48.menta.net - - [11/Jun/2004:16:39:06 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

206.144.16.56 - - [11/Jun/2004:16:56:50 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

h-66-166-111-48.chcgilgm.covad.net - - [11/Jun/2004:17:11:36 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

access.slocoe.org - - [11/Jun/2004:17:27:56 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

awf-gw.man.poznan.pl - - [11/Jun/2004:17:30:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

mail.crctechnik.cz - - [11/Jun/2004:17:34:10 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

212.17.144.67 - - [11/Jun/2004:17:36:21 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

61.30.47.21 - - [11/Jun/2004:17:40:06 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

zet1.ipee.pwr.wroc.pl - - [11/Jun/2004:17:42:29 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

sampson2.byu.edu - - [11/Jun/2004:17:47:07 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

207.87.211.126 - - [11/Jun/2004:17:51:17 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

129.2.216.251 - - [11/Jun/2004:17:55:53 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

dsl-201-129-242-169.prod-infinitum.com.mx - - [11/Jun/2004:17:58:18 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

212.21.228.30 - - [11/Jun/2004:18:06:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

cs68203208-153.rgv.rr.com - - [11/Jun/2004:18:08:53 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

fu-154-125.edit.ne.jp - - [11/Jun/2004:18:19:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

128.97.15.249 - - [11/Jun/2004:18:21:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

Static-IP-cr20011812431.cable.net.co - - [11/Jun/2004:18:24:00 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

webserver.genetik.uni-bonn.de - - [11/Jun/2004:18:30:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

66-114-194-100.focaldata.net - - [11/Jun/2004:18:39:04 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

209.184.108.162 - - [11/Jun/2004:18:43:59 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

benayadi.sciences.univ-metz.fr - - [11/Jun/2004:18:48:46 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

128.97.15.249 - - [11/Jun/2004:18:53:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

acs-24-154-185-24.zoominternet.net - - [11/Jun/2004:18:53:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

zet1.ipee.pwr.wroc.pl - - [11/Jun/2004:19:03:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

66.236.254.195.ptr.us.xo.net - - [11/Jun/2004:19:06:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

w186.z066088092.nyc-ny.dsl.cnc.net - - [11/Jun/2004:19:20:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

64-175-137-43.ded.pacbell.net - - [11/Jun/2004:19:31:02 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

153.110.132.10 - - [11/Jun/2004:19:31:07 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

206.144.16.56 - - [11/Jun/2004:19:40:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

66-114-194-100.focaldata.net - - [11/Jun/2004:19:43:15 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

acs-24-154-185-24.zoominternet.net - - [11/Jun/2004:19:48:17 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

200.68.117.221 - - [11/Jun/2004:19:50:51 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

208-58-89-27.c3-0.crm-ubr2.crm.ny.cable.rcn.com - - [11/Jun/2004:19:55:33 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

mrtg.pwless.net - - [11/Jun/2004:20:00:33 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

bdsl.66.15.111.240.gte.net - - [11/Jun/2004:20:24:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

dsl-201-129-242-169.prod-infinitum.com.mx - - [11/Jun/2004:20:27:29 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

c-24-15-203-208.client.comcast.net - - [11/Jun/2004:20:31:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "-" "-"

66.144.4.3 - - [11/Jun/2004:20:33:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1086 "referrer edited out" "-"

ua-213-115-80-115.cust.bredbandsbolaget.se - - [11/Jun/2004:20:36:21 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

130.237.131.230 - - [11/Jun/2004:20:38:39 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

Static-IP-cr20011812431.cable.net.co - - [11/Jun/2004:20:41:58 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

207.87.211.126 - - [11/Jun/2004:20:44:26 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

166.102.8.150 - - [11/Jun/2004:20:44:34 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

eul0600075-pip.eu.verio.net - - [11/Jun/2004:20:51:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

mail.extralearning.org - - [11/Jun/2004:20:51:15 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

bdsl.66.15.111.240.gte.net - - [11/Jun/2004:20:53:50 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

66.238.149.253.ptr.us.xo.net - - [11/Jun/2004:20:58:36 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

206.144.16.56 - - [11/Jun/2004:21:03:08 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

mail.crctechnik.cz - - [11/Jun/2004:21:07:21 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

65.120.143.200 - - [11/Jun/2004:21:09:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

user138.net638.oh.sprint-hsd.net - - [11/Jun/2004:21:13:48 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

66.46.219.102 - - [11/Jun/2004:21:16:10 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

iproxy2.nltree.nl - - [11/Jun/2004:21:18:52 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

eul0600075-pip.eu.verio.net - - [11/Jun/2004:21:21:08 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1099 "referrer edited out" "-"

c-24-9-92-60.client.comcast.net - - [11/Jun/2004:21:23:32 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1098 "referrer edited out" "-"

81.172.179.155 - - [11/Jun/2004:21:26:09 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

alfaproxy.pai.net.pl - - [11/Jun/2004:21:26:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

unknown.sagonet.net - - [11/Jun/2004:21:28:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

petlab.ptech.okstate.edu - - [11/Jun/2004:21:30:36 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

208.38.10.51 - - [11/Jun/2004:21:34:17 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

proxy.trybunal.gov.pl - - [11/Jun/2004:21:36:51 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

65.120.143.230 - - [11/Jun/2004:21:38:10 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

host114-96.pool21757.interbusiness.it - - [11/Jun/2004:21:40:41 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

mail.ccgvp.com - - [11/Jun/2004:21:42:24 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

66.236.254.195.ptr.us.xo.net - - [11/Jun/2004:21:44:55 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

130.237.131.230 - - [11/Jun/2004:21:49:23 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

customer-148-223-251-108.uninet-ide.com.mx - - [11/Jun/2004:21:53:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

200-204-151-247.speedyterra.com.br - - [11/Jun/2004:21:53:29 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

red-corpb5-2-105.telnor.net - - [11/Jun/2004:21:55:37 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

209.184.108.162 - - [11/Jun/2004:21:57:00 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

129.41.90.70 - - [11/Jun/2004:21:59:45 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

petlab.ptech.okstate.edu - - [11/Jun/2004:22:03:41 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

user68.footexperts.com - - [11/Jun/2004:22:06:36 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

c-24-8-58-22.client.comcast.net - - [11/Jun/2004:22:07:13 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1098 "referrer edited out" "-"

233-cust-102.venturenet.net - - [11/Jun/2004:22:09:53 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

mail.ccgvp.com - - [11/Jun/2004:22:14:23 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

ns2.idecod.net.228.167.195.in-addr.arpa - - [11/Jun/2004:22:19:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

nl-cae.01.adam.psi.com - - [11/Jun/2004:22:23:31 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

lpib.gva.es - - [11/Jun/2004:22:26:15 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

host-62-135-103-130.link.net - - [11/Jun/2004:22:28:01 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

mrtg.pwless.net - - [11/Jun/2004:22:28:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

66.117.204.210 - - [11/Jun/2004:22:30:45 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

host114-96.pool21757.interbusiness.it - - [11/Jun/2004:22:30:59 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

69-168-203-47.bflony.adelphia.net - - [11/Jun/2004:22:33:05 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

212.37.226.214 - - [11/Jun/2004:22:36:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

66-193-160-126.gen.twtelecom.net - - [11/Jun/2004:22:38:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

h209-221-122-53.yrbe.edu.on.ca - - [11/Jun/2004:22:41:22 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

mail.twisto.fr - - [11/Jun/2004:22:41:23 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

alfaproxy.pai.net.pl - - [11/Jun/2004:22:42:26 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

ip67-94-163-142.z163-94-67.customer.algx.net - - [11/Jun/2004:22:45:21 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

153.110.132.10 - - [11/Jun/2004:22:47:19 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

66.238.149.253.ptr.us.xo.net - - [11/Jun/2004:22:50:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

user68.footexperts.com - - [11/Jun/2004:22:53:07 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

193.144.127.11 - - [11/Jun/2004:22:56:08 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

69.168.203.47 - - [11/Jun/2004:22:59:28 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

ARennes-202-2-1-39.w193-253.abo.wanadoo.fr - - [11/Jun/2004:23:04:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

host-62-135-103-130.link.net - - [11/Jun/2004:23:08:43 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

129.2.216.251 - - [11/Jun/2004:23:11:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

eul0600086-pip.eu.verio.net - - [11/Jun/2004:23:15:06 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

webserver.genetik.uni-bonn.de - - [11/Jun/2004:23:17:24 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

proxy.trybunal.gov.pl - - [11/Jun/2004:23:20:36 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

txplanpxy302.pla.dc.xo.com - - [11/Jun/2004:23:22:25 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

host114-182.pool82185.interbusiness.it - - [11/Jun/2004:23:25:36 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

64-175-137-43.ded.pacbell.net - - [11/Jun/2004:23:29:51 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

206.144.16.56 - - [11/Jun/2004:23:34:28 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

12.22.85.3 - - [11/Jun/2004:23:39:38 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1086 "referrer edited out" "-"

nl-cae.01.adam.psi.com - - [11/Jun/2004:23:45:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

dsl-200-78-10-171.prod-infinitum.com.mx - - [11/Jun/2004:23:45:15 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

63.250.134.41 - - [11/Jun/2004:23:49:30 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

80.112.236.148 - - [11/Jun/2004:23:52:52 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

68.110.130.167 - - [11/Jun/2004:23:56:03 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

134.159.124.202 - - [11/Jun/2004:23:58:03 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

64.110.74.244 - - [12/Jun/2004:00:01:18 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

host-148-244-150-52.block.alestra.net.mx - - [12/Jun/2004:00:04:03 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

fu-154-125.edit.ne.jp - - [12/Jun/2004:00:09:47 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

209.184.108.162 - - [12/Jun/2004:00:14:24 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

195.245.185.18 - - [12/Jun/2004:00:20:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

216.143.84.233 - - [12/Jun/2004:00:22:29 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

62.248.116.6 - - [12/Jun/2004:00:25:59 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

mrtg.pwless.net - - [12/Jun/2004:00:26:13 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

80.58.4.170.proxycache.rima-tde.net - - [12/Jun/2004:00:34:46 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

211.248.99.252 - - [12/Jun/2004:00:38:41 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

141.48.18.110 - - [12/Jun/2004:00:38:46 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

txplanpxy302.pla.dc.xo.com - - [12/Jun/2004:00:42:01 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

CSA.Carleton.edu - - [12/Jun/2004:00:44:44 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

x42070e56.ip.e-nt.net - - [12/Jun/2004:00:48:24 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

adw154.internetdsl.tpnet.pl - - [12/Jun/2004:00:51:51 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

194.130.206.26 - - [12/Jun/2004:00:55:37 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

80.188.180.141 - - [12/Jun/2004:00:59:20 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

80.188.180.141 - - [12/Jun/2004:01:05:21 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

eul0600075-pip.eu.verio.net - - [12/Jun/2004:01:10:29 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

ool-182d19ae.dyn.optonline.net - - [12/Jun/2004:01:14:47 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

67.107.199.99 - - [12/Jun/2004:01:17:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

eul0600075-pip.eu.verio.net - - [12/Jun/2004:01:21:32 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

24-29-124-226.nyc.rr.com - - [12/Jun/2004:01:26:37 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

216.145.90.218 - - [12/Jun/2004:01:30:18 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

212.16.24.226 - - [12/Jun/2004:01:32:45 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

206.144.16.56 - - [12/Jun/2004:01:37:31 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

66-114-194-100.focaldata.net - - [12/Jun/2004:01:37:46 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

h209-221-122-53.yrbe.edu.on.ca - - [12/Jun/2004:01:38:31 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

209.184.108.162 - - [12/Jun/2004:01:38:45 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

CSA.Carleton.edu - - [12/Jun/2004:01:45:29 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

nurper.cu.edu.tr - - [12/Jun/2004:01:51:39 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

212.16.24.226 - - [12/Jun/2004:01:56:26 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

66.192.30.22 - - [12/Jun/2004:01:56:38 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

www.mcdaniel.hu - - [12/Jun/2004:01:58:40 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

ua-213-115-80-115.cust.bredbandsbolaget.se - - [12/Jun/2004:01:58:50 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

66.236.254.195.ptr.us.xo.net - - [12/Jun/2004:02:05:54 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

td9091e82.adsl.terralink.de - - [12/Jun/2004:02:09:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

md-wmnsmd-cuda2-c6b-20.chvlva.adelphia.net - - [12/Jun/2004:02:09:29 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

lpib.gva.es - - [12/Jun/2004:02:15:40 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

h209-221-122-53.yrbe.edu.on.ca - - [12/Jun/2004:02:20:24 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

24.1.118.30 - - [12/Jun/2004:02:26:42 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1099 "referrer edited out" "-"

209.184.108.162 - - [12/Jun/2004:02:30:38 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

x42070e56.ip.e-nt.net - - [12/Jun/2004:02:30:38 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

128.97.15.249 - - [12/Jun/2004:02:33:08 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

nl-cae.01.adam.psi.com - - [12/Jun/2004:02:37:59 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

67-67-156-131.morrisexport.com - - [12/Jun/2004:02:41:33 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

24.1.118.30 - - [12/Jun/2004:02:47:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1099 "referrer edited out" "-"

81.172.179.155 - - [12/Jun/2004:02:51:24 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

nurper.cu.edu.tr - - [12/Jun/2004:02:55:23 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

208-58-89-27.c3-0.crm-ubr2.crm.ny.cable.rcn.com - - [12/Jun/2004:03:00:25 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

mail.crctechnik.cz - - [12/Jun/2004:03:07:14 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

iproxy2.nltree.nl - - [12/Jun/2004:03:10:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

206.78.202.225 - - [12/Jun/2004:03:16:55 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

202-235-234-66.cosmoweb.net - - [12/Jun/2004:03:18:35 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

fu-154-125.edit.ne.jp - - [12/Jun/2004:03:27:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

benayadi.sciences.univ-metz.fr - - [12/Jun/2004:03:28:27 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1102 "referrer edited out" "-"

docsis130-48.menta.net - - [12/Jun/2004:03:33:08 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

67.107.199.99 - - [12/Jun/2004:03:37:48 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

141.158.65.245 - - [12/Jun/2004:03:40:12 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

208.38.10.51 - - [12/Jun/2004:03:43:50 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

nurper.cu.edu.tr - - [12/Jun/2004:03:48:30 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

66.7.14.86 - - [12/Jun/2004:03:56:17 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1086 "referrer edited out" "-"

proxy.trybunal.gov.pl - - [12/Jun/2004:03:56:30 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

petlab.ptech.okstate.edu - - [12/Jun/2004:03:58:50 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

webserver.genetik.uni-bonn.de - - [12/Jun/2004:04:07:20 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

lpib.gva.es - - [12/Jun/2004:04:07:25 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

nurper.cu.edu.tr - - [12/Jun/2004:04:10:46 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

213.177.236.115 - - [12/Jun/2004:04:17:09 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

c-24-8-58-22.client.comcast.net - - [12/Jun/2004:04:17:23 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1098 "referrer edited out" "-"

207.68.98.5 - - [12/Jun/2004:04:25:49 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1087 "referrer edited out" "-"

adsl-067-033-040-210.sip.bna.bellsouth.net - - [12/Jun/2004:04:29:17 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

txplanpxy302.pla.dc.xo.com - - [12/Jun/2004:04:29:23 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

81.208.106.73 - - [12/Jun/2004:04:37:53 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

64.110.74.244 - - [12/Jun/2004:04:40:25 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

68.110.130.167 - - [12/Jun/2004:04:43:59 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1090 "referrer edited out" "-"

81.208.106.73 - - [12/Jun/2004:04:44:03 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

mail.twisto.fr - - [12/Jun/2004:04:51:30 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

as6-6-3.vhe.s.bonet.se - - [12/Jun/2004:04:57:16 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

eul0600086-pip.eu.verio.net - - [12/Jun/2004:05:02:05 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

209.184.108.162 - - [12/Jun/2004:05:06:57 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

md-wmnsmd-cuda2-c6b-20.chvlva.adelphia.net - - [12/Jun/2004:05:11:20 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1100 "referrer edited out" "-"

mail.twisto.fr - - [12/Jun/2004:05:13:45 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1089 "referrer edited out" "-"

user138.net638.oh.sprint-hsd.net - - [12/Jun/2004:05:22:06 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

td9091e82.adsl.terralink.de - - [12/Jun/2004:05:22:28 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

awf-gw.man.poznan.pl - - [12/Jun/2004:05:25:17 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1091 "referrer edited out" "-"

webserver.genetik.uni-bonn.de - - [12/Jun/2004:05:30:23 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1103 "referrer edited out" "-"

alfaproxy.pai.net.pl - - [12/Jun/2004:05:38:15 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.0" 404 1088 "referrer edited out" "-"

docsis130-48.menta.net - - [12/Jun/2004:05:41:28 -0400] "POST /cgi-bin/formmail.cgi HTTP/1.1" 404 1101 "referrer edited out" "-"

**annie** · June 12, 2004

When I try to access http://193.224.42.8/ (mcdaniel.hu), I get a HTTP 502 Proxy Error

**annie** · June 12, 2004

I'm feeling particularly smug right now. About as smug as my cat when he's caught a bird.

I installed a formmail trap, so I'll see exactly what those spammers are trying to feed my script!

**TCH-Thomas** · June 12, 2004

Excuse ne for not knowing anything about this and it is a silly question perhaps, but

Anyway, during the last 24 hours my error log has filled up with attempts to spam my non-existent formmail script.

Isnt a non-existent a pretty useless thing as in does it matter if someone tries to use it or not, which should not be able to if non-existent?

**annie** · June 12, 2004

I don't like spammers. Trapping them would be fun.

Now, if I only could get the script to work properly...

**TCH-Thomas** · June 12, 2004

I dont like spammers either, just that i think that there will always be spammers so why spend time on something that will always visit me one way or another?

**Deverill** · June 12, 2004

Spammers are a waste of time. Tracking them down is almost always even more of a waste. It could be that you got more junk when sending to the host because the guy hosts himself under another name. Most of the big-time spammers have their own servers. When I realized this I turned to the best filtering I could and try to ignore the rest... it's just not worth my effort - I still have miles to go before I sleep.

**annie** · June 12, 2004

How about the poor owners of those unintentionally open proxies?

**TCH-Dick** · June 12, 2004

I got tired of my error log showing 404s, from people probing for formmail. Since I didn't have formmail on my site I gave them something too look at. Its a little sloppy, but I only put it up for my own pleasure.

>$date = date("F d , l , Y - H:i:s");
$fp = fopen("/home/*******/private/ip.txt", "a+"); 
$host = gethostbyaddr("$REMOTE_ADDR"); 
$dns = gethostbyname ($host);
$log = "At $date , \n \n * Host: $host , \n \n * IP: $dns ,\n \n * Browser: $HTTP_USER_AGENT";
@fwrite($fp, "$log \n\n ----------------------------------------------------------------------------------- \n\n");
@fclose($fp);
echo $REMOTE_ADDR;
?>


Your IP has been logged.

Thank you for visiting.

Edited June 12, 2004 by TCH-Dick

**TCH-Don** · June 12, 2004

LMAO

Thanks Dick, I had not seen that site.

And thank for the code Thumbs Up

**TCH-Rob** · June 12, 2004

How do you implement that Dick?

**annie** · June 12, 2004

Thanks! Loved the script Dick!

And how to implement:

Create a php file with the code. Then remember to change the path to the IP file, and remember to change the permissions on that folder so it can be written to.

Then put in a redirect from formmail.cgi to the php page.

Simple!

**TCH-Dick** · June 12, 2004

Sorry I should have added that.

Thanks annie

Edited June 12, 2004 by TCH-Dick

**TCH-Dick** · June 12, 2004

Then put in a redirect from formmail.cgi to the php page.

I just noticed that part. I didn't set mine up that way. I run PHP-Nuke, and for some reason all of the hits I recieved were directly to formail.php

**annie** · June 12, 2004

Yeah, except those hits I'm getting don't register in that file.

The first hit registered, but not the next ones. Need to change permissions on the IP file as well.

**annie** · June 12, 2004

Eh, I think the best way is to upload a blank file for ip.txt

Otherwise the webserver will create it, and then it's impossible to change permissions.

**TCH-Bruce** · June 12, 2004

Eh, I think the best way is to upload a blank file for ip.txt

Otherwise the webserver will create it, and then it's impossible to change permissions.

That's the way I did it and it works.

Thanks Dick & Annie Thumbs Up

**TCH-Rob** · June 12, 2004

OK, I am missing something, can I see an example of the rewrite for .htaccess?

**annie** · June 12, 2004

Redirect temp /cgi-bin/formmail.cgi http://domain.com/php/formmail.php

But that can be done in cpanel as well.

**annie** · June 12, 2004

This is weird, I'm not getting any hits to formmail anymore?

Maybe they've removed my site from their bot?

If that's true, and if Dick's script was the trigger, then this is definitely something to celebrate.

**TCH-Bruce** · June 12, 2004

Annie why "temp" and not "permanent"?

**TCH-Rob** · June 12, 2004

Redirect temp /cgi-bin/formmail.cgi http://domain.com/php/formmail.php

OK, I was not putting the http://domain.com before the rest. I got it now. ty

**annie** · June 12, 2004

No special reason.

Hmm, not sure I want anyone to index formmail.php?

**annie** · June 12, 2004

Turns out the spammers are continuing. And they're managing not to fall into the trap. They're not logged,though I am, if I try to access the script.

How?

**annie** · June 13, 2004

I caught my first logged access to Dick's script today. Hopefully that's one spammer who will avoid my script in the future!

**DarqFlare** · June 13, 2004

Moving to a more appropriate area...

Sign In

Formmail Hits Gone Amok

Recommended Posts

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Join the conversation