Strange entries in my log files

[robdon]

Hi,

I keep on getting strange entries in my access log...

I have started to get these about 2 weeks ago, and they seem to come from difference ip address all the time. It is always the only log of that IP address in my logs, they dont seem to do anything else, just try to find a file called 'default.ida' .

I have changes the ip address for security reasons.

211.1.1.1 - - [03/Aug/2001:07:35:04 -050 "GET /default.ida?NNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u909
0%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%
u531b%u53ff%u0078%u0000%u00=a 0" 404 1005


I have never had a file called default.ida on my site, so I dont know why so many are linking to it, or why that is the only activity that I see from that ip.

Any ideas???

Thanks for any help,

Rob Donovan

 

[wushutwist]

This is just the Code Red virus. You can ignore it because it only affects unpatched IIS Servers (which are most of them). Wushutwist