Attempts to POST to web server mail 'cgi's

[John Myers <psumba@xxxxxxxxx>]

Has anyone else noticed a sudden increase in the number of
unsuccessful POST instructions in their web logs lately?  All appear
to be attempts to access a web interface of a mail server.

Ours have gone up tremendously in the past 5 days.  Here's a sample "attack":

POST /cgi-bin/formmail-vf.cgi HTTP/1.1
POST /cgi-bin/formmail.pl HTTP/1.0
POST /cgi-bin/contact.cgi HTTP/1.0
POST /cgi-bin/formmail.pl HTTP/1.0
POST /cgi-bin/mailform.pl HTTP/1.0
POST /cgi-bin/FormMail.pl HTTP/1.0
POST /cgi-bin/formmail.cgi HTTP/1.0
POST /mail.cgi HTTP/1.0
POST /cgi-bin/fmail.pl HTTP/1.0
POST /cgi-bin/form.cgi HTTP/1.0
POST /cgi-bin/contact.pl HTTP/1.0
POST /cgi/formmail HTTP/1.1
POST /cgi-bin/mail.cgi HTTP/1.0
POST /formmail.pl HTTP/1.1
POST /cgi-bin/feedback.cgi HTTP/1.0
POST /contact.cgi HTTP/1.0
POST /cgi-bin/cgiemail/contact.txt HTTP/1.0
POST /cgi-bin/form.pl HTTP/1.0
POST /cgi-bin/mailform.cgi HTTP/1.0
POST /cgi-bin/feedback.pl HTTP/1.0
POST /cgi-bin/mail.pl HTTP/1.1
POST /cgi-bin/sender.pl HTTP/1.0
POST /cgi-bin/mailer/mailer.cgi HTTP/1.0
POST /cgi-bin/ezformml.cgi HTTP/1.0
POST /cgi-bin/email.cgi HTTP/1.0
POST /cgi-bin/formmail HTTP/1.0
POST /cgi-bin/npl_mailer.cgi HTTP/1.0
POST /cgi-bin/FormMail.cgi HTTP/1.0
POST /cgi-bin/email.pl HTTP/1.0
POST /cgi-bin/BFormMail.pl HTTP/1.0
POST /cgi-bin/contactus.cgi HTTP/1.0
POST /cgi-bin/mailer.cgi HTTP/1.0
POST /cgi-bin/friends.cgi HTTP/1.0
POST /cgi-bin/mailer.pl HTTP/1.0
POST /formmail.cgi HTTP/1.0
POST /cgi-bin/tellafriend.cgi HTTP/1.1
POST /cgi/contact.cgi HTTP/1.0
POST /cgi/FormMail.pl HTTP/1.0
POST /cgi-bin/mailto.cgi HTTP/1.0
POST /cgi-bin/af.cgi HTTP/1.0
POST /cgi-bin/cgiemail/mailtemp.txt HTTP/1.0
POST /dp_tellafriend/scripts/tellafriend.cgi HTTP/1.1
POST /cgi-bin/tell/tell.cgi HTTP/1.0
POST /cgi-bin/mailto.pl HTTP/1.0
POST /cgi-bin/referral.cgi HTTP/1.0
POST /cgi-bin/tellafriend.pl HTTP/1.1
POST /email.cgi HTTP/1.0
POST /cgi-bin/contactus.pl HTTP/1.0
POST /cgi-bin/anymail.cgi HTTP/1.0
POST /cgi-bin/chfeedback.pl HTTP/1.0
POST /cgi-bin/af.pl HTTP/1.1
POST /cgi-bin/asomail.cgi HTTP/1.0

They all arrive within a second or so of each other (someone is
probing us).  Their IP addresses appear to be from "different places",
but I'm convinced that they are forged.

Yesterday, we had three "attacks" aimed at us ... each entry in the
attack receives a 404 back from our web server ... but I don't like
the sentiment.

Any ideas???