My log files show multiple requests for a file called "default.ida".

This file does not exist on my server, but it appears that I have requests for it from multiple IP addresses at all times of the day, sometimes hundreds of times per day.

Can anyone tell me who might be looking for this non-existent file and why?

Thanks for the help.

This is from the Code Red worm. Infected computers spread the worm by exploiting a buffer overflow for the MS Indexing Service, of which default.ida is a part.

Ahah. I should have figured as much.

Well I won't worry about it, then. Glad I'm running Linux.

if you're worried about bandwidth (if you have a large custom 404), it's been recommend you create or upload a 0k file named default.ida