Once in a while we get registrations on our website similar to this one. (This is a transcript of an email notification):
New User Registration
FirstName: cowdqd
LastName: cowdqd
Company: nWJrFxUitwFMbnK
Email: qwupxt@bsesfj.com
Phone: oCFsfSHolrnx
Fax: -152
AddressLineOne: xRQgqnCOJkkoA
AddressLineTwo: obsDvktXDL
City: vqxXGZQgIplDwm
Province: AB
PostalCode: kgyabr
Country: CA
IncludedInPromotions: Yes
RequestInfo: No
Comments: x0EDw7 eecfocnmvwzu, [url=http://fvbppxzancnj.com/]fvbppxzancnj[/url], [link=http://tyflcliodtqa.com/]tyflcliodtqa[/link], http://ldklshrkpwwn.com/
RegistrationDate: February 24 2010
I thought it was spamming, but usually the emails and links are not even valid. Why would anybody want to do that?
This could be spam, or it could be someone doing a sort of “perimeter test” on your system to see if you use a captcha, if you validate certain types of data, if the data is posted somewhere public, etc.
For instance, the string “eecfocnmvwzu” looks random, but it might be specifically generated to be unique. An attacker can then do a search of your website looking for that string and, if it’s found, they might know that they can script a form submission and have the results show up. Once they know that they might submit a new form that looks more legit but contains an attack of some kind, perhaps a XSS attack or a link to a website that hosts malware.
I don’t know if that scenario is realistic, but it seems possible.