Does anyone know what this guy is trying to do?

[John Lester]

Going through my logs and I find a couple dozen entries like the one below. Does anyone understand what this little shit is trying to do?


91.207.7.149 - - [30/Sep/2014:16:33:30 -0400] "GET /showthread.php/4245-Thurs-Jan-30-NYC-Peace-of-Mind-Lecture-Memory-Treatment-by-William-Barr-PhD+Result:+using+proxy+186.90.186.113:8080;+chose n+nickname+%22abradaopa2446%22;+registered+%28regi stering+only+mode+is+ON%29;+TryAntiSFS=1; HTTP/1.0" 200 48235 "http://www.braintalkcommunities.org/showthread.php/4245-Thurs-Jan-30-NYC-Peace-of-Mind-Lecture-Memory-Treatment-by-William-Barr-PhD+Result:+using+proxy+186.90.186.113:8080;+chose n+nickname+%22abradaopa2446%22;+registered+%28regi stering+only+mode+is+ON%29;+TryAntiSFS=1;" "Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0"

[tbworld]

It is a spambot trying to register. This is pretty well known code. Block it if you can, if not do not worry about it unless he registered. There are many variants of the same code. :)

[Max Taxable]

Note how it even gives a fake, spoof user agent string?

[John Lester]

Thanks :)

I need to get that ban spiders by user agent mod installed again :D Hopefully tomorrow night :)