POST cgi-bin/formmail

Is it just us the last two days, or are others getting hammered?

[Stefan]

Our site usually gets a few POST cgi-bin formmail attempts, warez, or spam scripts, or something, on a regular basis, but the last two days we've been getting in excess of 500 a day, one after the other with changing IP#'s, (all receiving 404's). Are we just lucky or is anyone else seeing this in the logs?

[Stefan]

No more POST's. I stuck an appropriate bit of code in the .htaccess

[Romeo]

Hi Stefan,

only saw 4x on 06-26 and just one today.

You may look at the utility "FormMail-trap" (under GPL) which implements a faked formmail with handy features like a honeypot and sending automatic abuse reports.

Regards,
R.