Default.IDA???

[Mel]

Hi All:

A question - I have noted in my 404 logs that someone or something has been searching for a default.ida file very frequently (985 times in the past week).

Can anyone tell me if this is a special file type or is it just likely to be an error.

I try to keep my 404s to a minimum, so nearly 1000 searches for a file I have never had on my site bugs me.

[markymark]

It's not an error and I presume you are on a Unix server else you would already know what this is. This is the Code Red Worm trying to get into your server via a request for default.ida. As only Windows servers actually have this file, you needn't worry about it.

[Mel]

Thanks Markymark.

Yes I am running a linux server, but still distressed that this worm is this active.

[Blue]

I'm not sure if it will serve any purpose but, I know some folks have created a "default.ida" page. This can be done using a simple text editor. Then just keep this file in your root dir.

Others I know have used redirects to whisk these requests to a nice little "nasty" or "silly" page. Or to their home page.

[markymark]

Just ignore it is my advice. Apart from using up system resources, it can't do you any harm and will soon give up and hack into someone else's server instead.