Suspicious phrase in search log

[plpapeman]

Our search log shows several instances of the following search phrase (the adult-themed address has been edited to hopefully avoid spam filters and to render it unclickable):

"http abc.12345.xpg.com.br texte.txt?"

What does this indicate?

Thanks

[David]

It isn't a hack attempt. So I think spammer are spamming your site.
Most web forms generate E-mail, or create records of some sort, that someone eventaully looks at. They probalby have automated tools to submit this to 1000s of web sites at a time.

And it kind of worked for them, as you have shared the URL with others, maybe even made you curious enough to visit their site. (To anyone reading this, don't do it, it might be a malware site)

[plpapeman]

Thanks for the quick reply.

What would indicate a hack attempt? What should we be looking for?

[David]

For hack attempts you find SQL and PHP code in the query string. For XSS attacks you find Javascript code being used as a search query.

Zoom doesn't use SQL, but that doesn't stop them trying.

But there are no holes we know about in V6, or have been reported by other customers.