That country set looked suspicious so I googled
registering+only+mode+is+ON
Thanks Jen. I tried searching for the URL variables but came up empty. I
assumed that whatever it was that was generating the requests was using
proxies but couldn't make sense of what it's purpose was. The domain of
Does anyone know or have a clue as to what is generating these requests?
/index.cfm?fid=2889Result:+used+x_fields.txt;+chosen
+nickname+%22pn49o0w5bs%22;+registered+%28registering+only+mode+is+ON%29;
They are coming from various IP's in Europe, southeast Asia, Ukraine
That country set looked suspicious so I googled registering+only+mode+is+ON
The top results were at a blackhat seo site, so I googled the tool
mentioned there. It's a bot trying to post spam to forums.
http://en.wikipedia.org/wiki/XRumer
On Mon, May 12, 2014 at 6:35 PM, UXB
3 matches
Mail list logo
