Looks like this guy is back, posting on /agatha2/.
 >>/agatha2/31346/
 >>/agatha2/31350/
 >>/agatha2/31352/
 >>/agatha2/31353/

May be the same guy who was asking to enable code tags?
 >>/agatha2/31164/

I'm not sure what he's trying to do. I understand exploit is fixed and also user post deletion is disabled there so hopefully he can't do any damage.