One thing about the beginning of the month, parsing log files is easier and quicker as they haven't grown so large yet.

The following is in the logs of a few of my sites, I have truncated some of this, as I am just pointing out certain parts.

2004-02-01 21:37:18 - GET /cgi-sys/ 404

The first part is the date, time and requesting IP
The next part is the request.
The third is the response.

You see I don't use

This isn't the only thing they looked for.
GET /cgi-bin/formmail.cgi
GET /cgi-bin/FormMail.cgi
GET /cgi-sys/
GET /cgi-sys/formmail.cgi
GET /cgi-sys/
GET /cgi-bin/
GET /cgi-bin/

There were more, but I think you get the idea.

What does this all mean?

Well, this is a bot looking for a perl based mail program that they could hijack so they could use my bandwidth and my server to send spam.