Wrox Programmer Forums

Need to download code?

View our list of code downloads.

| FAQ | Members List | Search | Today's Posts | Mark Forums Read
BOOK: Beginning ASP.NET 4.5 : in C# and VB
This is the forum to discuss the Wrox book Beginning ASP.NET 4.5: in C# and VB by Imar Spaanjaars; ISBN: 978-1-118-31180-6
Welcome to the p2p.wrox.com Forums.

You are currently viewing the BOOK: Beginning ASP.NET 4.5 : in C# and VB section of the Wrox Programmer to Programmer discussions. This is a community of tens of thousands of software programmers and website developers including Wrox book authors and readers. As a guest, you can read any forum posting. By joining today you can post your own programming questions, respond to other developers’ questions, and eliminate the ads that are displayed to guests. Registration is fast, simple and absolutely free .
DRM-free e-books 300x50
Reply
 
Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old April 8th, 2014, 11:09 AM
Authorized User
Points: 416, Level: 7
Points: 416, Level: 7 Points: 416, Level: 7 Points: 416, Level: 7
Activity: 0%
Activity: 0% Activity: 0% Activity: 0%
 
Join Date: Nov 2013
Posts: 84
Thanks: 29
Thanked 2 Times in 2 Posts
Default Ch 18 Exception Handling

Hi Imar,

So my site that I built from the book has been online for a month or so. I've begun to see some interesting things because my email notifications of site errors is still enabled and it started sending me error messages. Since the site is just part of the exercise from your book and presumably no one really knows about it (unless they are reading this forum and happened to read precisely the post where I might have given you the URL), how would anyone know there is a site? It's actually just a sub-domain, so buried even deeper.

I guess someone must know because I'm getting error messages. The messages tend to come in groups, typically 6 - 8. They happen in rapid succession, the emails frequently showing the same time stamp to the minute. They happen at various times of day. I'll copy a sample of the messages at the bottom of this email.

The first time I saw this it was just after I had asked my hosting provider for help with folder security. In discussions with them it seemed like they may have run some scripts against the site while trouble shooting. Then later I added a ClickOnce page in the root of the site simply because it was a convenient location for testing Visual Studio's default ClickOnce publish to web. I initially (& wrongly) associated a group of error messages with a particular day that I was downloading samples of my pilot test project. But I didn't really check the times of the emails and didn't notice the pattern until last night. I don't think that set of error messages was related to me since they were all in the same minute; I couldn't have even downloaded over the same minute.

Last night I received 6 error messages from the middle of the night. I wasn't accessing the site, and I saw the error messages were all within the same minute in the middle of the night (US time).

1) So I thought I would reach out to you and ask if you recognize what these error messages may be caused by?

2) Is there something I can do to capture better information to determine what is happening? Like who is causing it, insight to what the intent with the requests is, etc.?

3) Can you tell from this error information if I missed including something you told us to include in the error report format?

I checked the User table in the database and there are no new users from when I published and setup the site.

Thanks.

Best Regards,
Alan

I know it's not code, I just thought it might be easier to read in an HTML block in this post. The query strings at the end of the messages are always different. Most of the error messages in a group are like this:

HTML Code:
Message
This is an invalid script resource request.
Stack Trace
at System.Web.Handlers.ScriptResourceHandler.ProcessRequest(HttpContextBase context, VirtualFileReader fileReader, Action`2 logAction, Boolean validatePath) at System.Web.Handlers.ScriptResourceHandler.ProcessRequest(HttpContext context) at System.Web.Handlers.ScriptResourceHandler.System.Web.IHttpHandler.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Query String
d=nv7asgRUU0tRmHNR2D6t1NW4wgUXOJENr93BIpF-0hNTzxoQSnOtPxzU4k5Sl1BB8sAu1ksCzB-tLe7KHT9XCldIAUKjwNvZB8w21Xb-ChwaQvyi3hgvs3vInOqRZLJxZQjQ6UjBDtsX_9ZdMcBKEQ2&t=244e515d
But in each group there will be 1 or 2 of this nature:

HTML Code:
Message
This is an invalid webresource request.
Stack Trace
at System.Web.Handlers.AssemblyResourceLoader.System.Web.IHttpHandler.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Query String
d=pynGkmcFUV13He1Qd6_TZPdavZbTCwCGrXwPYdFZRv5osf_fMF4G1_xV7Vtd6IX6_gspOG1w_BnBHeePuvTNMg2&t=635207174963396618
Reply With Quote
  #2 (permalink)  
Old April 8th, 2014, 12:13 PM
Imar's Avatar
Wrox Author
Points: 72,073, Level: 100
Points: 72,073, Level: 100 Points: 72,073, Level: 100 Points: 72,073, Level: 100
Activity: 0%
Activity: 0% Activity: 0% Activity: 0%
 
Join Date: Jun 2003
Location: Utrecht, Netherlands.
Posts: 17,089
Thanks: 80
Thanked 1,587 Times in 1,563 Posts
Default

I am getting the same stuff on my site as well. Looks like a bot making invalid requests. The URL could have been picked up automatically using a bot that scans this forum.

It could also be a regular visitor making invalid requests. Not sure why this would happen, but maybe some browsers don't handle the URLs very well.

You would need to look into the IIS logs and see if there are any patterns you can recognize to see who's accessing your site and why.

Cheers,

Imar
__________________
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Follow me on Twitter

Author of Beginning ASP.NET 4.5 : in C# and VB, Beginning ASP.NET Web Pages with WebMatrix
and Beginning ASP.NET 4 : in C# and VB.
Did this post help you? Click the button below this post to show your appreciation!
Reply With Quote
The Following User Says Thank You to Imar For This Useful Post:
AlanWheeler (April 8th, 2014)
  #3 (permalink)  
Old April 8th, 2014, 12:30 PM
Authorized User
Points: 416, Level: 7
Points: 416, Level: 7 Points: 416, Level: 7 Points: 416, Level: 7
Activity: 0%
Activity: 0% Activity: 0% Activity: 0%
 
Join Date: Nov 2013
Posts: 84
Thanks: 29
Thanked 2 Times in 2 Posts
Default

Thanks! Cool, I actually have an attacker?

This sounds like a longer process to learn how to handle it, but I appreciate you sharing you have the same thing on your site.

Best Regards,
Alan
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Ch 18 Global exception handling AlanWheeler BOOK: Beginning ASP.NET 4.5 : in C# and VB 1 February 9th, 2014 08:17 AM
Ch 18 - Try it out: Handling Exceptions Site Wide (OtherErrors.aspx) Tulsi BOOK: Beginning ASP.NET 4 : in C# and VB 0 October 9th, 2013 09:24 AM
Ch 18 - Try it out: Handling Exceptions Site Wide (OtherErrors.aspx) Tulsi BOOK: Beginning ASP.NET 4 : in C# and VB 0 October 9th, 2013 09:21 AM
ch 18 - Try It out: Handling Exceptions Site Wide Tulsi BOOK: Beginning ASP.NET 4 : in C# and VB 10 September 12th, 2013 01:30 PM
Exception Handling Tip - Ch. 18, p.695 Tulsi BOOK: Beginning ASP.NET 4 : in C# and VB 5 June 6th, 2013 10:34 AM



All times are GMT -4. The time now is 08:09 AM.


Powered by vBulletin®
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
© 2013 John Wiley & Sons, Inc.