[Dshield] Someone is looking for formmail.pl script...

miroslaws@home.com miroslaws at home.com
Wed Aug 22 09:25:57 GMT 2001

Somebody is scanning domains and try to find existance of CGI script
formmail.pl If the script exists, than the information is e-mailed to
address woah at aol.com . In the below log the 'xxxxxxxxx.com' it is the domain
hosted by one of my web servers. I had to hide the real name of the domain
because of my confindentiality agreement. - - [15/Aug/2001:20:58:22 -0700] "GET
/cgi-bin/formmail.pl?email=itp642 at mek869.com&recipient=woah at aol.com&subject=
%20valid.%20~vms HTTP/1.0" 404 0 "-" "-"

Best Regards,


More information about the list mailing list