dupres01 - 2:37 pm on May 22, 2012 (gmt 0)
The following showed up in my log. I have no idea what it is doing. Also, this is the only entry in the log for IP 184.108.40.206.
220.127.116.11 - - [22/May/2012:02:58:02 -0600] "POST /?-dallow_url_include%3don+-dauto_prepend_file%3dphp://input HTTP/1.1" 200 6835 "-" "Mozilla/3.0 (windows)"
The IP hasn't accessed anything on my site so I don't even know what it is posting in response to.
It looks to me as if it is trying to do something destructive, but I am only guessing.
(I am unsure which forum topic this question belongs in.)