Hi Laugh,
I do not have any firm examples at the moment but I will be sure to keep you in mind the next time I see this crop-up.
Very often I see where the listed referrer string will display something along the lines of:
Text Formatted Code
http%3A%2F%2Fblogdogit.com%2Farticle.php%3Fstory%3D20150425161631294%5C%27A%3D0
...with query strings like:
Text Formatted Code
story%3D20150425161631294%5C%27A%3D0
I have 7 of these sorts in my database now but have no trouble with them. Those that cause trouble are usually an extended version of this technique.
There are times that clicking on the GUS today list item will throw a server error so I will manually "ban" the offending IP and manually add to Ignore list and ultimately flush these entries. Sometimes they can be banned and ignored with the buttons in day.php only to crash the GUS app in the "Clean Up" phase. And as stated every once in a great while this ploy will block root access (seemingly due to reading the data back at the error reporting - is my best guess.)
I did find the following entry in a backed-up error.log that is typical of the sort of clue that sent me to GUS data to get back in (this was probably not a fatal error but may very well have been...):
Text Formatted Code
Mon 25 Aug 2014 12:45:23 EDT - 1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''20110408112644399\'' at line 1. SQL in question: SELECT title FROM gl_stories WHERE sid = '20110408112644399\'
Like I said, I will let you know if it happens again and see if I can give you more exacting information then.
Thanks!