This has happened a couple of times over the past few weeks. Someone is spamming my forum with posts that contain links to (likely) malwar sites that talk about presacription drugs, etc. They are positing in my forums withour registering so they show up as "anonymous". What is even more disturbing, they are posting in forums they are either open only to admin, or forums that are closed. Of course I firewall their IPs, but it is troubling that is is hapenning. I searched my logs and located the offending IPs and this is what I found: (I've x'd out some info, but you'll get the jist):
[18/Mar/2012:14:50:12 -0400] "POST /x/ubbthreads.php HTTP/1.1" 302 -"http://www.xxxxxxxxxxx.com/x/ubbthreads.php/topics/811793/Your_subject_here" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 GTB5"
Is this some kind of PhP Exploit being used, and if so is there anmything we can do about it?
