From the access log…
“GET /index.php?dispatch=profiles.add+[PLM=0][R]+GET+http://ourshop.com/index.php?dispatch=profiles.add+[0,68987,77419]±%3E+[R]+POST+http://ourshop.com/+[R=302][0,0,448]±%3E+[R]+GET+http://ourshop.com/index.php?dispatch=profiles.add+[0,69400,77832]±%3E+[L]+
POST+http://ourshop.com/+[R=302][0,0,448]±%3E+[L]+GET+http://ourshop.com/index.php?dispatch=profiles.add+[9450,0,77832]”
Also coincided with a burst of random attempts at logging in to admin.