This could either be benign as MIA suggests or it could be a hacking attempt. Either way, you've presumably eliminated the problem with the change.