One thing about the beginning of the month, parsing log files is easier and quicker as they haven't grown so large yet.

The following is in the logs of a few of my sites, I have truncated some of this, as I am just pointing out certain parts.

2004-02-01 21:37:18 216.126.141.38 - GET /cgi-sys/formmail.pl 404

The first part is the date, time and requesting IP
The next part is the request.
The third is the response.

You see I don't use formail.pl

This isn't the only thing they looked for.
GET /cgi-bin/formmail.cgi
GET /cgi-bin/FormMail.cgi
GET /cgi-sys/formmail.pl
GET /cgi-sys/formmail.cgi
GET /cgi-sys/FormMail.pl
GET /cgi-bin/Formmail.pl
GET /cgi-bin/mail.pl

There were more, but I think you get the idea.

What does this all mean?

Well, this is a bot looking for a perl based mail program that they could hijack so they could use my bandwidth and my server to send spam.

Rick
Universal4