Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I have an ASP.net website hosted using the Ultidev Web Server Pro.

Every day I get a steady stream of errors generated by my application where page requests were requested and denied. This is obviously someone/something trying to find any exploits on my website. Here is an example log:

28/08/2012 11:37:11 - File not Found:http://MyWebServer/phpmyadmin/index.php
28/08/2012 11:37:11 - File not Found:http://MyWebServer/phpMyAdmin/index.php
28/08/2012 11:37:12 - File not Found:http://MyWebServer/phpMyAdmin-2/index.php
28/08/2012 11:37:12 - File not Found:http://MyWebServer/php-my-admin/index.php
28/08/2012 11:37:13 - File not Found:http://MyWebServer/phpMyAdmin-2.2.3/index.php
28/08/2012 11:37:13 - File not Found:http://MyWebServer/phpMyAdmin-2.2.6/index.php
28/08/2012 11:37:14 - File not Found:http://MyWebServer/phpMyAdmin-2.5.1/index.php
28/08/2012 11:37:14 - File not Found:http://MyWebServer/phpMyAdmin-2.5.4/index.php
28/08/2012 11:37:15 - File not Found:http://MyWebServer/phpMyAdmin-2.5.5-rc1/index.php
28/08/2012 11:37:15 - File not Found:http://MyWebServer/phpMyAdmin-2.5.5-rc2/index.php
28/08/2012 11:37:15 - File not Found:http://MyWebServer/phpMyAdmin-2.5.5/index.php
28/08/2012 11:37:16 - File not Found:http://MyWebServer/phpMyAdmin-2.5.5-pl1/index.php
28/08/2012 11:37:16 - File not Found:http://MyWebServer/phpMyAdmin-2.5.6-rc1/index.php
28/08/2012 11:37:17 - File not Found:http://MyWebServer/phpMyAdmin-2.5.6-rc2/index.php
28/08/2012 11:37:18 - File not Found:http://MyWebServer/phpMyAdmin-2.5.6/index.php
28/08/2012 11:37:18 - File not Found:http://MyWebServer/phpMyAdmin-2.5.7/index.php
28/08/2012 11:37:19 - File not Found:http://MyWebServer/phpMyAdmin-2.5.7-pl1/index.php
28/08/2012 13:52:07 - File not Found:http://MyWebServer/admin/pma/translators.html

Is this normal? Is there anything I can do to protect myself against this?

share|improve this question
    
This is normal, I have had this issue in the past –  Daniel Li Aug 29 '12 at 16:14

1 Answer 1

up vote 2 down vote accepted

It is "normal". As you already stated, they probably are bots trying to find a way to access applications with known exploits, pinging random IPs. One thing you can do is to have third party services accessible from non-standard paths and/or password protect them if necessary and helpful. As long as the bot is hitting 404 then you're safe even if you are running those services.

share|improve this answer
    
Is it worth blocking known bad IPs or IPs that are persistently getting 404s? –  w3d Aug 28 '12 at 14:07
    
You could block them, but keeping in mind that IPs are really easy to change, so you might end up blocking more IP than you want, and although unlikely, you could block some legitimate user. Unless you see some activity with a different pattern of actions every access, actively trying to hack your site (trying to inject SQL, bruteforcing passwords, etc), I wouldn't worry about blocking IPs. –  milo5b Aug 28 '12 at 14:21

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.