Odd error from one ip address only

[newsgroups.comcast.net]

I am having an odd problem. Every day I get application errors from my
website. The errors are only from one particular ip address (The error is
System.NullRefe renceException: Object reference not set to an instance of an
object....) The logs show that the request appear to be coming from some
kind of spider or bot. They have no url referrer and are the order of the
pages requested could not be "clicked" in the order requested. They all fail
at the same point. Here is the error message and a snip of the code.

Exception of type 'System.Web.Htt pUnhandledExcep tion' was thrown.
System.NullRefe renceException: Object reference not set to an instance of an
object.
at mgFunctions.mgS etCookies(Strin g stroID)
at mgDisplay.Page_ Load(Object sender, EventArgs e)
at System.Web.Util .CalliHelper.Ev entArgFunctionC aller(IntPtr fp, Object
o, Object t, EventArgs e)
at System.Web.Util .CalliEventHand lerDelegateProx y.Callback(Obje ct sender,
EventArgs e)
at System.Web.UI.C ontrol.OnLoad(E ventArgs e)
at System.Web.UI.C ontrol.LoadRecu rsive()
at System.Web.UI.P age.ProcessRequ estMain(Boolean
includeStagesBe foreAsyncPoint, Boolean includeStagesAf terAsyncPoint)

Code snip.

Sub Page_Load(sende r As Object, e As EventArgs)
if not Ispostback then
dim stroID as string = "u"
if Request.QuerySt ring.Item("_o") <> string.empty then
stroID = Request.QuerySt ring.Item("_o") .tostring()
end if
mgFunctions.mgS etCookies(stroI D)

end if
It seems like the application doesn't know what mgFunctions.mgS etCookies is
for this particular user only. Could this user be doing something malicious?

I am getting 30 or 40 errors a day just from this one user, but no other.
Any thoughts?

Mike

[clickon]

I suspect it is malicious, but automated. Probably some script kiddies
running and automated exploit scanner or some malware infected server doing a
similar thing. Look at the server logs for any publicly available web server
and you get this sort of thing all the time.

"newsgroups.com cast.net" wrote:

I am having an odd problem. Every day I get application errors from my
website. The errors are only from one particular ip address (The error is
System.NullRefe renceException: Object reference not set to an instance of an
object....) The logs show that the request appear to be coming from some
kind of spider or bot. They have no url referrer and are the order of the
pages requested could not be "clicked" in the order requested. They all fail
at the same point. Here is the error message and a snip of the code.

Exception of type 'System.Web.Htt pUnhandledExcep tion' was thrown.
System.NullRefe renceException: Object reference not set to an instance of an
object.
at mgFunctions.mgS etCookies(Strin g stroID)
at mgDisplay.Page_ Load(Object sender, EventArgs e)
at System.Web.Util .CalliHelper.Ev entArgFunctionC aller(IntPtr fp, Object
o, Object t, EventArgs e)
at System.Web.Util .CalliEventHand lerDelegateProx y.Callback(Obje ct sender,
EventArgs e)
at System.Web.UI.C ontrol.OnLoad(E ventArgs e)
at System.Web.UI.C ontrol.LoadRecu rsive()
at System.Web.UI.P age.ProcessRequ estMain(Boolean
includeStagesBe foreAsyncPoint, Boolean includeStagesAf terAsyncPoint)

Code snip.

Sub Page_Load(sende r As Object, e As EventArgs)
if not Ispostback then
dim stroID as string = "u"
if Request.QuerySt ring.Item("_o") <> string.empty then
stroID = Request.QuerySt ring.Item("_o") .tostring()
end if
mgFunctions.mgS etCookies(stroI D)

end if
It seems like the application doesn't know what mgFunctions.mgS etCookies is
for this particular user only. Could this user be doing something malicious?

I am getting 30 or 40 errors a day just from this one user, but no other.
Any thoughts?

Mike

[George Ter-Saakov]

I would advice to ignore that

Those robots do some weird things, submit form with bad parameters (or no
parameters) .....

If you are tired of the error just ban it.

George.
"newsgroups.com cast.net" <Mi************ ****@noZorY.geZ waYrrenY.com> wrote
in message news:0q******** *************** *******@comcast .com...

I am having an odd problem. Every day I get application errors from my
website. The errors are only from one particular ip address (The error is
System.NullRefe renceException: Object reference not set to an instance of
an
object....) The logs show that the request appear to be coming from some
kind of spider or bot. They have no url referrer and are the order of the
pages requested could not be "clicked" in the order requested. They all
fail
at the same point. Here is the error message and a snip of the code.

Exception of type 'System.Web.Htt pUnhandledExcep tion' was thrown.
System.NullRefe renceException: Object reference not set to an instance of
an
object.
at mgFunctions.mgS etCookies(Strin g stroID)
at mgDisplay.Page_ Load(Object sender, EventArgs e)
at System.Web.Util .CalliHelper.Ev entArgFunctionC aller(IntPtr fp, Object
o, Object t, EventArgs e)
at System.Web.Util .CalliEventHand lerDelegateProx y.Callback(Obje ct
sender,
EventArgs e)
at System.Web.UI.C ontrol.OnLoad(E ventArgs e)
at System.Web.UI.C ontrol.LoadRecu rsive()
at System.Web.UI.P age.ProcessRequ estMain(Boolean
includeStagesBe foreAsyncPoint, Boolean includeStagesAf terAsyncPoint)

Code snip.

Sub Page_Load(sende r As Object, e As EventArgs)
if not Ispostback then
dim stroID as string = "u"
if Request.QuerySt ring.Item("_o") <> string.empty then
stroID = Request.QuerySt ring.Item("_o") .tostring()
end if
mgFunctions.mgS etCookies(stroI D)

end if
It seems like the application doesn't know what mgFunctions.mgS etCookies
is
for this particular user only. Could this user be doing something
malicious?

I am getting 30 or 40 errors a day just from this one user, but no other.
Any thoughts?

Mike

[Jason Hales]

Don't forget that most spiders do not accept cookies.
Have you tried connecting to your site using a browser that doesn't
support cookies?
Perhaps mgFunctions.mgS etCookies() should check the value of
Request.Browser .Cookies before trying to get/set them

[newsgroups.comcast.net]

"Jason Hales" <ja*********@ya hoo.com> wrote in message
news:11******** *************@v 46g2000cwv.goog legroups.com...

Don't forget that most spiders do not accept cookies.
Have you tried connecting to your site using a browser that doesn't
support cookies?
Perhaps mgFunctions.mgS etCookies() should check the value of
Request.Browser .Cookies before trying to get/set them

I have tried that with no problem. The function does check for the existence
of the cookie. Also, many users browse with no cookies and I don't get any
errors. I suspect the bot is doing something is shouldn't be. It is coming
from
aplacecalledAbo venet_Communica tions_Inc.

Mike

[Jason Hales]

That's stumped me. It might help to post up some code for
mgFunctions.mgS etCookies

Jason

[Mahhek]

I also am having the same problem and the problem am having is in this line
"Request.QueryS tring.Item("_o" ) <> string.empty "

that if the Request.QuerySt ring.Item("_o") = null then this exception appears. That means that if the previous page is not submitting anthing in the query string then the error is generated.

[Mahhek]

I also am having the same problem and the problem am having is in this line
"Request.QueryS tring.Item("_o" ) <> string.empty "

that if the Request.QuerySt ring.Item("_o") = null then this exception appears. That means that if the previous page is not submitting anthing in the query string then the error is generated.