Folder and extension appearing after my domain name

A couple day ago i noticed that t开发者_高级运维raffic had increased dramatically. Upon checking i noticed in my stats program that the extra traffic was from a direct source.

I get URLs like that too, once in a while, on my site.

I'm too lazy to check, but there's probably some exploit out for some poorly secured PHP app. Some botnets are trying the name for the exploitable page on every server they hit, including yours, in the hope that you are running this application and they can use it to take over your server.

Update

A site called "ThreatExpert" has published a report (automatically slapped together, so not totally informative) on a similar attack using the same file name:

http://www.threatexpert.com/report.aspx?md5=d6e0c2a51ee4fa17ee1bb44518c421f1