RE: Weird URL request parameters
That country set looked suspicious so I googled registering+only+mode+is+ON Thanks Jen. I tried searching for the URL variables but came up empty. I assumed that whatever it was that was generating the requests was using proxies but couldn't make sense of what it's purpose was. The domain of the specific website they keep hitting does have a user forum so it now makes sense as to what they are trying to do. Thanks. Dennis Powers UXB Internet - A website Design and Hosting Company P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844 W: http://www.uxbinternet.com W: http://www.ctbusinesslist.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358634 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Weird URL request parameters
Does anyone know or have a clue as to what is generating these requests? /index.cfm?fid=2889Result:+used+x_fields.txt;+chosen +nickname+%22pn49o0w5bs%22;+registered+%28registering+only+mode+is+ON%29; They are coming from various IP's in Europe, southeast Asia, Ukraine and Middle USA on a nearly regular basis. They are not causing any issue since we trap them but I was wondering if anyone knew what software was generating them and/or why? Dennis Powers UXB Internet - A website Design and Hosting Company P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844 W: http://www.uxbinternet.com W: http://www.ctbusinesslist.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358622 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Weird URL request parameters
That country set looked suspicious so I googled registering+only+mode+is+ON The top results were at a blackhat seo site, so I googled the tool mentioned there. It's a bot trying to post spam to forums. http://en.wikipedia.org/wiki/XRumer On Mon, May 12, 2014 at 6:35 PM, UXB denn...@uxbinternet.com wrote: Does anyone know or have a clue as to what is generating these requests? /index.cfm?fid=2889Result:+used+x_fields.txt;+chosen +nickname+%22pn49o0w5bs%22;+registered+%28registering+only+mode+is+ON%29; They are coming from various IP's in Europe, southeast Asia, Ukraine and Middle USA on a nearly regular basis. They are not causing any issue since we trap them but I was wondering if anyone knew what software was generating them and/or why? Dennis Powers UXB Internet - A website Design and Hosting Company P.O. Box 6028, Wolcott, CT 06716 - T:203-879-2844 W: http://www.uxbinternet.com W: http://www.ctbusinesslist.com ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358623 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm