Tiresome

But just because they bug me so much, here's the latest spammer from my www logs -

118.168.136.169 - - [29/Apr/2009:13:54:46 +0200] "CONNECT maila.burst.idv.tw:25 HTTP/1.0" 501 357 "-" "-"

Hack attempt?

In my web server logs I regularly see the following -

211.95.78.70 www.ocnar.com - [14/Jan/2009:07:12:00 +0100] "POST http://www.ocnar.com/cgi-bin/textenv.pl HTTP/1.1" 404 345 "-" "-"

I'm assuming it's some kind of hack... but googling it didn't turn up much. Can anyone enlighten me?

Small pleasures

Would you believe the "CONNECT mail.agc.idv.tw:25 HTTP/1.0" finally stopped being logged on Sept 05 :)

Spammers

Everybody hates spammers... at least I do, and with a passion. Any small form of revenge I find greatly satisfying. In the logs of my lighthttp server, I see this -

118.168.140.161 - - [31/Aug/2008:09:39:02 +0100] "CONNECT mail.agc.idv.tw:25 HTTP/1.0" 501 357 "-" "-"

every two hours. I guess it's some form of hunt for open SMTP relays... but seriously, if they've tried every two hours for a month (hopefully without success), isn't it time to give up?

I feel like writing a little server that fakes the behaviour of an SMTP server, and wastes some of their time and bandwidth... but I know it would waste more of my time than theirs... it seems we simply can't win against these vermin.