While looking through the logs for my web server, for a web site I wrote, I've noticed a lot of queries are being made twice, first as I expect then followed again within a second with 'A=0 appended to each argument.
The A=0 is not part of any code I wrote for the web site, so it is being added by the remote browser and/or user.
"GET /xxx.cgi?id=1160 HTTP/1.1" "GET /xxx.cgi?id=1160'A=0 HTTP/1.1"
"GET /list.cgi?anon=true&list=abb HTTP/1.1" "GET /list.cgi?anon=true'A=0&list=abb HTTP/1.1" "GET /list.cgi?anon=true&list=abb'A=0 HTTP/1.1"
This happens frequently and regularly and from many different sources, so I don't think it's a hack attempt, but it does make me wonder what could be causing it.
Does anyone know why this is happening?
The browsers are logged as many variation of Mozilla and Chrome, and IPs are scattered around the world.