One thing about the beginning of the month, parsing log files is easier and quicker as they haven't grown so large yet.
The following is in the logs of a few of my sites, I have truncated some of this, as I am just pointing out certain parts.
2004-02-01 21:37:18 216.126.141.38 - GET /cgi-sys/formmail.pl 404
The first part is the date, time and requesting IP
The next part is the request.
The third is the response.
You see I don't use formail.pl
This isn't the only thing they looked for.
GET /cgi-bin/formmail.cgi
GET /cgi-bin/FormMail.cgi
GET /cgi-sys/formmail.pl
GET /cgi-sys/formmail.cgi
GET /cgi-sys/FormMail.pl
GET /cgi-bin/Formmail.pl
GET /cgi-bin/mail.pl
There were more, but I think you get the idea.
What does this all mean?
Well, this is a bot looking for a perl based mail program that they could hijack so they could use my bandwidth and my server to send spam.
Rick
Universal4