NYCPHP Meetup

NYPHP.org

[nycphp-talk] worm/virus's hammering feedback scripts?

Rolan Yang rolan at omnistep.com
Sun Sep 11 09:34:34 EDT 2005


A few of my web based feedback (contact.php) scripts have been getting 
hammered with some sort of  spam or bot net attack over the past week.
The scripts are running on different servers at different web hosts, but 
the garbage coming in has been the same. The "from" field is filled in 
with random lower case letters like "kljaogr at domain.com" where "domain" 
is the website address. The body field contains the same email address.

Sometimes "Content-Type: multipart/mixed; 
boundary=\"===============083392.."
is appended to the email address in both the "from:" field and also the 
body.

The submissions are coming from different ip's all over the world.
Has anyone else been experiencing anything similar?

~Rolan





More information about the talk mailing list