Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

This question already has an answer here:

I have been getting a lot of bot spam lately. The most recent one has this as the body:

already to standards Address is is required return ? then with local include accurate Another they in ? and make items the still their and a ? solitary of suspend My still buy Australia, the ? safe to of security to totality. requirements. locations

Can someone please explain what they are trying to do by just putting random words in my text box?

share|improve this question

marked as duplicate by Rory Alsop Feb 20 '13 at 10:34

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

I'm violating this site's guidelines by merely speculating, but my guess is that Attacking Host A tries to insert [some string] onto your site through a form and Attacking Host B tries to read [some string] from your site. You may notice the attempt and may blacklist the IP address of the form spammer, but if you are vulnerable the real attack won't come from that IP address. The form spammer is a disposable scout; it simply "tags" sites as vulnerable and moves on.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.