From: security curmudgeon ([email protected])
To: [email protected], [email protected], [email protected]
Cc: Brian McWilliams ([email protected]), Declan McCullagh ([email protected])
Date: Thu, 25 Sep 2003 00:56:55 -0400 (EDT)
Subject: Daily CGI Formmail Spam Attempts (fwd)


this has to end eventually, right?

why doesn't verizon care about spammers abusing their network?


lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:03:46:45 -0400] "GET /cgi-bin/FormMail.cgi?realname=cdnot%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/FormMail.cgi&message=vzujh%20hgjbycrexfh%20ieqfumkepkf%20mrjjcv HTTP/1.1" 404 1820 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:03:46:45 -0400] "GET /cgi-bin/formmail.cgi?realname=rcipg%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail.cgi&message=nwugr%20dgekltdejol%20airblidtxxx%20zsoshn HTTP/1.1" 403 372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:03:46:45 -0400] "GET /cgi-bin/formmail.pl?realname=qczop%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail.pl&message=llkny%20cfvbbjlmiuc%20yqhithjqogn%20zznrym HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:03:46:45 -0400] "GET /cgi-bin/formmail/formmail.cgi?realname=jwkaz%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail/formmail.cgi&message=jbbuu%20imshqgsbhba%20xgeqinqoucd%20ootfvk HTTP/1.1" 404 1909 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:03:46:46 -0400] "GET /cgi-bin/formmail/formmail.pl?realname=dxwtc%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail/formmail.pl&message=qrzjk%20purgoxhrojz%20dddfyuynttb%20deanuq HTTP/1.1" 404 1857 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:10:04:02 -0400] "GET /cgi-bin/formmail.cgi?realname=fzpuu%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail.cgi&message=kjstv%20rdlhzqrbqsz%20xpviiwagueu%20gpcpur HTTP/1.1" 403 372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:10:04:02 -0400] "GET /cgi-bin/FormMail.pl?realname=mephn%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/FormMail.pl&message=otecr%20silvztjhhgj%20bfireemhieq%20futkep HTTP/1.1" 404 1838 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:10:04:04 -0400] "GET /cgi-bin/formmail/FormMail.cgi?realname=ttvok%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.cgi&message=uqdrg%20ywrbwryevvo%20ivgnuktmobv%20urazkv HTTP/1.1" 404 1838 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:10:04:05 -0400] "GET /cgi-bin/FormMail.cgi?realname=ypqao%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/FormMail.cgi&message=hufft%20kslnantqzyj%20ugcagpwhbfr%20pdevfh HTTP/1.1" 404 1856 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:10:04:06 -0400] "GET /cgi-bin/formmail/FormMail.pl?realname=ipicp%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.pl&message=iviol%20utepbxvbkrc%20wamkyzpacgb%20rvwvxj HTTP/1.1" 404 1848 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:15:09:18 -0400] "GET /cgi-bin/formmail.cgi?realname=swcqa%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail.cgi&message=nxoar%20xayemuxydpm%20bcsvfjetrrq%20tlpsbo HTTP/1.1" 403 372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:15:09:18 -0400] "GET /cgi-bin/formmail.pl?realname=dpfuc%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail.pl&message=rrqtl%20imbohacdzma%20qigakfbinee%20yreqwd HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:15:09:32 -0400] "GET /cgi-bin/FormMail.cgi?realname=gxyix%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/FormMail.cgi&message=pdonb%20sbuwjwcyigs%20cpljpxfpjoa%20xmndnq HTTP/1.1" 404 1856 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:15:09:32 -0400] "GET /cgi-bin/FormMail.pl?realname=wozrw%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/FormMail.pl&message=ycoma%20bsveidtrrqt%20losaonvqsoa%20peduoy HTTP/1.1" 404 1849 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:15:09:33 -0400] "GET /cgi-bin/formmail/FormMail.pl?realname=nunhu%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.pl&message=nantq%20zyjugcagpwh%20bfrodeuehlg%20wabaco HTTP/1.1" 404 1867 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-166-246.lsanca2.dsl-verizon.net - - [24/Sep/2003:15:09:33 -0400] "GET /cgi-bin/formmail/FormMail.cgi?realname=edgyv%[email protected][email protected]&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.cgi&message=fbncr%20jhblhcjogfz%20sgrxevexzmg%20fbljvf HTTP/1.1" 404 1846 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"

pool-141-155-108-241.ny5030.east.verizon.net - - [24/Sep/2003:18:16:06 -0400] "GET /cgi-bin/[email protected][email protected]&subject=FormMailFound&=www.attrition.org/cgi-bin/formmail.pl HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
pool-141-155-108-241.ny5030.east.verizon.net - - [24/Sep/2003:18:18:21 -0400] "GET /cgi-bin/[email protected][email protected]&subject=FormMailFound&=www.attrition.org/cgi-bin/formmail.pl HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"