The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Attempted Hacks?????

Discussion in 'General Discussion' started by awsol, May 12, 2002.

  1. awsol

    awsol cPanel Test Bitch

    Joined:
    Feb 8, 2002
    Messages:
    591
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Boston MA
    27-81 - 0/0/12 . 0.01 30108 6 0.0 0.00 3.15 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    28-81 - 0/0/11 . 0.02 30108 26 0.0 0.00 0.01 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    29-81 - 0/0/11 . 0.01 30108 11 0.0 0.00 0.03 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    30-81 - 0/0/11 . 0.00 30108 16 0.0 0.00 0.03 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    31-81 - 0/0/5 . 0.02 30109 12 0.0 0.00 0.02 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    32-81 - 0/0/4 . 0.02 30109 12 0.0 0.00 0.000 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    33-81 - 0/0/4 . 0.01 30109 12 0.0 0.00 0.000 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    34-81 - 0/0/10 . 0.02 30109 13 0.0 0.00 0.10 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    35-81 - 0/0/5 . 0.02 30109 12 0.0 0.00 0.02 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    36-81 - 0/0/9 . 0.01 30109 11 0.0 0.00 0.03 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1
    37-81 - 0/0/3 . 0.02 30109 38 0.0 0.00 0.000 202.110.201.18 (unavailable) GET http://www.microsoft.com/ HTTP/1.1



    46-52 - 0/0/1 . 0.01 122926 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    47-52 - 0/0/1 . 0.00 122926 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    48-25 - 0/0/1 . 0.00 219169 4 0.0 0.00 0.00 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    49-25 - 0/0/1 . 0.01 219169 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    50-25 - 0/0/2 . 0.02 219167 2 0.0 0.00 0.00 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    51-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    52-25 - 0/0/1 . 0.01 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    53-25 - 0/0/1 . 0.01 219167 2 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    54-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    55-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    56-25 - 0/0/1 . 0.00 219167 10 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    57-25 - 0/0/1 . 0.01 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    58-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    59-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    60-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    61-25 - 0/0/1 . 0.01 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    62-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    63-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    64-25 - 0/0/1 . 0.02 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    65-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    66-25 - 0/0/1 . 0.01 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    67-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s
    68-25 - 0/0/1 . 0.00 219167 1 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.cgi?recipient=openrelayspy@flashmail.com&
    69-25 - 0/0/1 . 0.01 219167 2 0.0 0.00 0.000 206.148.145.0 (unavailable) GET /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&s


    There are tons of these under the apache status. The reason I looked in here and was questioning WTF was going on was i received like 10 emails all saying this.

    A message that you sent contained one or more recipient addresses that were
    incorrectly constructed:

    &106777.0202@compuserve.com&betternewsletters.com,&106777.0203@compuserve.com&betternewsletters.com,&106777.0204@compuserve.com&betternewsletters.com,&106777.0205@compuserve.com&betternewsletters.com,&106777.0207@compuserve.com&betternewsletters.com,&106777.0210@compuserve.com&betternewsletters.com,&106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0202@compuserve.com&
    &106777.0203@compuserve.com&betternewsletters.com,&106777.0204@compuserve.com&betternewsletters.com,&106777.0205@compuserve.com&betternewsletters.com,&106777.0207@compuserve.com&betternewsletters.com,&106777.0210@compuserve.com&betternewsletters.com,&106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0203@compuserve.com&
    &106777.0204@compuserve.com&betternewsletters.com,&106777.0205@compuserve.com&betternewsletters.com,&106777.0207@compuserve.com&betternewsletters.com,&106777.0210@compuserve.com&betternewsletters.com,&106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0204@compuserve.com&
    &106777.0205@compuserve.com&betternewsletters.com,&106777.0207@compuserve.com&betternewsletters.com,&106777.0210@compuserve.com&betternewsletters.com,&106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0205@compuserve.com&
    &106777.0207@compuserve.com&betternewsletters.com,&106777.0210@compuserve.com&betternewsletters.com,&106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0207@compuserve.com&
    &106777.0210@compuserve.com&betternewsletters.com,&106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0210@compuserve.com&
    &106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0211@compuserve.com&
    &106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0212@compuserve.com&
    &106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0213@compuserve.com&
    &106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0214@compuserve.com&
    &106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0216@compuserve.com&
    &106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0217@compuserve.com&
    &106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0220@compuserve.com&
    &106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0221@compuserve.com&
    &106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0222@compuserve.com&
    &106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0223@compuserve.com&
    &106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0224@compuserve.com&
    &106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0225@compuserve.com&
    &106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0226@compuserve.com&
    &106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0227@compuserve.com&
    &106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0230@compuserve.com&
    &106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0231@compuserve.com&
    &106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0232@compuserve.com&
    &106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0233@compuserve.com&
    &106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0234@compuserve.com&
    &106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0235@compuserve.com&
    &106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0236@compuserve.com&
    &106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0237@compuserve.com&
    &formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &formmailtesting@inbox.lv&
    &106777.0243@compuserve.com&betternewsletters.com: malformed address: betternewsletters.com may not follow &106777.0243@compuserve.com&

    These addresses have been ignored. There were no other addresses in your
    message, and so no attempt at delivery was possible.

    ------ This is a copy of your message, including all the headers. ------

    Received: from nobody by icecloud.nixhosting.com with local (Exim 3.35 #1)
    id 176mOS-00082n-00; Sun, 12 May 2002 01:59:40 -0400
    To: &106777.0202@compuserve.com&betternewsletters.com,&106777.0203@compuserve.com&betternewsletters.com,&106777.0204@compuserve.com&betternewsletters.com,&106777.0205@compuserve.com&betternewsletters.com,&106777.0207@compuserve.com&betternewsletters.com,&106777.0210@compuserve.com&betternewsletters.com,&106777.0211@compuserve.com&betternewsletters.com,&106777.0212@compuserve.com&betternewsletters.com,&106777.0213@compuserve.com&betternewsletters.com,&106777.0214@compuserve.com&betternewsletters.com,&106777.0216@compuserve.com&betternewsletters.com,&106777.0217@compuserve.com&betternewsletters.com,&106777.0220@compuserve.com&betternewsletters.com,&106777.0221@compuserve.com&betternewsletters.com,&106777.0222@compuserve.com&betternewsletters.com,&106777.0223@compuserve.com&betternewsletters.com,&106777.0224@compuserve.com&betternewsletters.com,&106777.0225@compuserve.com&betternewsletters.com,&106777.0226@compuserve.com&betternewsletters.com,&106777.0227@compuserve.com&betternewsletters.com,&106777.0230@compuserve.com&betternewsletters.com,&106777.0231@compuserve.com&betternewsletters.com,&106777.0232@compuserve.com&betternewsletters.com,&106777.0233@compuserve.com&betternewsletters.com,&106777.0234@compuserve.com&betternewsletters.com,&106777.0235@compuserve.com&betternewsletters.com,&106777.0236@compuserve.com&betternewsletters.com,&106777.0237@compuserve.com&betternewsletters.com,&formmailtesting@inbox.lv&betternewsletters.com,&106777.0243@compuserve.com&betternewsletters.com
    From: sharsand1219@aol.com ()
    Subject: Your future 1UpXHXGh
    Message-Id: &E176mOS-00082n-00@icecloud.nixhosting.com&
    Date: Sun, 12 May 2002 01:59:40 -0400

    Below is the result of your feedback form. It was submitted by
    (sharsand1219@aol.com) on Sunday, May 12, 2002 at 01:59:40
    () on Sunday, May 12, 2002 at 01:59:40
    ---------------------------------------------------------------------------

    .:

    We will show you how to not only make money online, but make a steady six-figure income yearly, guaranteed! If you're not making over $1,000 in your first week using our methods, we will refund every penny! You dont even need to return the product to us, because there is no shipping involved.. you have NOTHING to lose. Click below for details!
    http://dciAB@61.129.81.99/www/empireofriches5/index.html








    -------------------------------------------
    If you have received this mail in error and would like to be removed from this mailing list, please simply click below:
    http://dciAB@61.129.81.99/www/remove.html

    ---------------------------------------------------------------------------






    Of course they were different due to different email addresses. I did trace the IPs to a ISP called Asia-Pacific. If these are atempted hacks they are out of jurisdiction and I really can't do shit. From those apache proccess that seem to be searing for formmail proccess it looks as if that is the culprut. Please shed some light on this ASAP.
     
  2. rpmws

    rpmws Well-Known Member

    Joined:
    Aug 14, 2001
    Messages:
    1,824
    Likes Received:
    5
    Trophy Points:
    38
    Location:
    back woods of NC, USA
    cool huh? I get tons of these. Find the user that has his own copy of formmail.pl in his own persoan; cgi-bin and delete it. Email all you users and tell them to use teh server-wide clone or go host elsewhere. Do a search for formmail.pl to see who has it.

    Spammers wil do whatever it takes. I just love this one. 10 emaisl at a time all from a scripts running from a 56k modem through a formmail.pl form half a world a way :-( seems they could find a cleaner and more efficiant way ..but noooo.

    relax the rest is normal ..just keep your eye on those 202 IPs.
     
  3. rpmws

    rpmws Well-Known Member

    Joined:
    Aug 14, 2001
    Messages:
    1,824
    Likes Received:
    5
    Trophy Points:
    38
    Location:
    back woods of NC, USA
    sorry for bad spelling above ..been up 30 haurs bad headache..can't spell when feel good either. :-(
     
  4. tn3

    tn3 Member

    Joined:
    Mar 19, 2002
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    I get those showing up in my 404 because I do not use formmail (or rename it to something else). If you do use formail, make sure you do set it so that only your domain(s) can call it.

    These spammers is trying to send this request to harvest any formmail which has not been set to restrict access from a certain domain, see below, you will know what they're trying to do:

    excerpt from 404 log (which shows more than your log):

    /cgi-bin/formmail.pl?recipient=kkmurray91@aol.com,&subject=look%20at%20it&email=Misu@iei.net&=http://yourDomain.com/cgi-bin/formmail.pl

    /cgi-bin/formmail.pl?recipient=openrelayspy@flashmail.com&subject=please%20close%20your%20open%20formmail&email=openrelayspy1@flashmail.com&=http://yourDomain.com/cgi-bin/formmail.pl

    These bastards are trying to send themselves the location of the formmail which will allow him to spam from.

    What I normally do is harvest their email (the &recipient=kkmurray91@aol.com&) and do bad things to them back, revenge is sweet ;)

    BTW: the &&email=xxx& is (sometimes) only a dummy address so that formmail would accept the call.
     

Share This Page