RE: Weird URL request parameters

[UXB]

 That country set looked suspicious so I googled
registering+only+mode+is+ON

Thanks Jen.  I tried searching for the URL variables but came up empty.  I
assumed that whatever it was that was generating the requests was using
proxies but couldn't make sense of what it's purpose was.  The domain of the
specific website they keep hitting does have a user forum so it now makes
sense as to what they are trying to do.  Thanks.



Dennis Powers
UXB Internet - A website Design and Hosting Company
P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
W: http://www.uxbinternet.com
W: http://www.ctbusinesslist.com



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358634
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Re: Weird URL request parameters

[Jen Larkin]

That country set looked suspicious so I googled registering+only+mode+is+ON

The top results were at a blackhat seo site, so I googled the tool
mentioned there. It's a bot trying to post spam to forums.
http://en.wikipedia.org/wiki/XRumer

On Mon, May 12, 2014 at 6:35 PM, UXB denn...@uxbinternet.com wrote:

 Does anyone know or have a clue as to what is generating these requests?

 /index.cfm?fid=2889Result:+used+x_fields.txt;+chosen
 +nickname+%22pn49o0w5bs%22;+registered+%28registering+only+mode+is+ON%29;

 They are coming from various IP's in Europe, southeast Asia, Ukraine and
 Middle USA on a nearly regular basis.

 They are not causing any issue since we trap them but I was wondering if
 anyone knew what software was generating them and/or why?




 Dennis Powers
 UXB Internet - A website Design and Hosting Company
 P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844
 W: http://www.uxbinternet.com
 W: http://www.ctbusinesslist.com




 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358623
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm