Forum and Form spammer.

[g1smd]

After weeks of blocking stuff in

188.227.nnn.nnn

for looking suspicious and for random form posting, a few minutes ago a request for

www.example.com/this/page/here++++++++++Result:+it+is+not+a+forum+/+guestbook+%28or+no+connection+to+internet%29

with the same URL as referrer, requested by

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)

let on what I had always suspected.

[keyplyr]

I've been blocking +++++ (5 of them) in UA and in refer for years. There's just no legit purpose for any more than one plus sign (often found in a refer from search results.) Every time I've seen five or more consecutive plus signs, it was an attempt at bad behavior.