Bizarre 'Get' URL in access_log

I logged in today to find a ton of eggdrop scripts running on one of my machines. In the process of poking around to find how they got in (clearly through a PHP application), I came across this entry in one of my access_log files. Can anyone tell me what they're trying to do? What I think is strange is that they never issued a GET, but got a 200 back.

PHP Code:
12.4.27.xx - - [24/Apr/2006:12:32:29 -0400] "title=discount+ink+cartridges&url=http%3A%2F%2Fwww.printer-ink-i.info%2Fchoose%2Fdiscount-ink-cartridges.html&bl
og_name=discount+ink+cartridges&excerpt=discount+ink+cartridges+%0Ainkjet+printer+cartridges++%3Ca+href%3D%22http%3A%2F%2Fwww.printer-ink-i.info%2Fchoose%2Fi
nkjet-printer-cartridges.html%22%3Einkjet+printer+cartridges%3C%2Fa%3E%0Afax+machines++%3Ca+href%3D%22http%3A%2F%2Fwww.printer-ink-i.info%2Fchoose%2Ffax-mach
ines.html%22%3Efax+machines%3C%2Fa%3E" 200 2628 "-" "-" 
I don't believe it's related to the security breach I'm looking into, but what on earth is with it?

Edit: A quick search of this month's file finds 373 such lines.

 

 

 

 

Top