Spam bot with debug mode enabled - anyone else seen that?

[wrkq]

(For the sake of transparency - this is also cross-posted to other web tech forum I frequent.)

Hey guys,
this is just a little curiosity. I can see this kind of lines in my Apache logs since a very long time (more than a year) a few times a week, but can't find anything concrete about when googling the phrases. (Can't find anything in forum search here on SMFcommunity either.)

It is a SMF spam bot trying to register on a webcomic's forums, and bouncing away due to a custom question/response captcha on the registration page.
It seems to be then sending a request containing a log of its actions, bizarrely.
Have anyone seen this before and could point me towards some information?

We're still on 1.1.18 due to some custom one-off modifications I had no time to port to SMF2 yet, btw.

(This is errorlog, not accesslog, thus "File does not exist" instead of 404.)

Code Select Expand

File does not exist: /var/www/redactedbyOP.tld/forum/index.php+++++++++++++++++++++++Result:+chosen+nickname+"Henbloneerabe";+ReCaptcha+decoded;+registered+(registering+only+mode+is+ON);

File does not exist: /var/www/redactedbyOP.tld/forum/index.php++++++++++++++++++++++++++++++++++++++Result:+unknown+type+of+text+captcha,+add+it+in+textcaptcha.txt;+ReCaptcha+decoded;+no+post+sending+forms+are+found;

File does not exist: /var/www/redactedbyOP.tld/forum/index.php++++++++++++++++++++++++++++++++++++++Result:+used+self-learning+system+data;+unknown+type+of+text+captcha,+add+it+in+textcaptcha.txt;+ReCaptcha+decoded;+no+post+sending+forms+are+found;

File does not exist: /var/www/redactedbyOP.tld/forum/index.php++++++++++++++++++++++++++++++++++++++Result:+using+proxy+190.97.204.37:3128;+GET-timeouts+1;+unknown+type+of+text+captcha,+add+it+in+textcaptcha.txt;+ReCaptcha+decoded;+no+post+sending+forms+are+found;

File does not exist: /var/www/redactedbyOP.tld/forum/index.php++++++++++++++++++++++++++++++++++++++Result:+\xed\xe5\xe8\xe7\xe2\xe5\xf1\xf2\xed\xfb\xe9+\xf2\xe8\xef+\xf2\xe5\xea\xf1\xf2\xee\xe2\xee\xe9+\xe7\xe0\xf9\xe8\xf2\xfb,+\xe4\xee\xe1\xe0\xe2\xfc\xf2\xe5+\xe2+textcaptcha.txt;+ReCaptcha+\xe4\xe5\xf8\xe8\xf4\xf0\xee\xe2\xe0\xed\xe0;+\xed\xe5+\xed\xe0\xf8\xeb\xee\xf1\xfc+\xf4\xee\xf0\xec\xfb+\xe4\xeb\xff+\xee\xf2\xef\xf0\xe0\xe2\xea\xe8;

File does not exist: /var/www/redactedbyOP.tld/forum/index.php++++++++++++++++++++++++++++++++++++++Result:+\xed\xe5\xe8\xe7\xe2\xe5\xf1\xf2\xed\xfb\xe9+\xf2\xe8\xef+\xf2\xe5\xea\xf1\xf2\xee\xe2\xee\xe9+\xe7\xe0\xf9\xe8\xf2\xfb,+\xe4\xee\xe1\xe0\xe2\xfc\xf2\xe5+\xe2+textcaptcha.txt;+\xf0\xe0\xf1\xef\xee\xe7\xed\xe0\xe2\xe0\xed\xe8\xe5+ReCaptcha+\xee\xf2\xea\xeb\xfe\xf7\xe5\xed\xee;+\xed\xe5+\xed\xe0\xf8\xeb\xee\xf1\xfc+\xf4\xee\xf0\xec\xfb+\xe4\xeb\xff+\xee\xf2\xef\xf0\xe0\xe2\xea\xe8;

File does not exist: /var/www/redactedbyOP.tld/forum/+++++++++++++++++++++++++++++++++++++++++++++++Result:+unknown+type+of+text+captcha,+add+it+in+textcaptcha.txt;+ReCaptcha+decoded;+no+post+sending+forms+are+found;

File does not exist: /var/www/redactedbyOP.tld/forum/+++++++++++++++++++++++++++++++++++++++++++++++Result:+unknown+type+of+text+captcha,+add+it+in+textcaptcha.txt;+ReCaptcha+decoding+is+disable;+no+post+sending+forms+are+found;

Regards,
-- w

[Arantor]

Buggy bot is buggy, best thing you can say about it really.