Anyone see these errors before?

[compunerdy]

I had some strange errors I have never seen before.. Is this just someone trying to access pages?

Code: Select all

  11/20/2013 7:02:24 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/Errors/GeneralError.aspx?aspxerrorpath=/App_Themes/YomLocation: The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed. 
  11/20/2013 4:40:59 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/Errors/GeneralError.aspx?aspxerrorpath=/App_Themes/YomLocation: The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed. 
  11/20/2013 3:32:08 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/Errors/GeneralError.aspx?aspxerrorpath=/App_Themes/YomLocation: The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed. 
  11/20/2013 2:44:17 AM Error An error has occured at http://www.thecustomsabershop.com/App_Themes/YomLocation: A potentially dangerous Request.Path value was detected from the client (:).

[Katie]

I have no idea, but there is no folder named /Errors/ in any of our themes. Must be something that was added after installation.

The file '/App_Themes/Errors/GeneralError.aspx' is in the special directory 'App_Themes', which is not allowed

[compunerdy]

There is not a errors folder under app_themes on my server either..

So somehow the file at '/App_Themes/Errors/GeneralError.aspx' is getting called and since there is no such file it gives a error..

[Katie]

There is an \Errors\GeneralError.aspx file that is referenced by the web.config.

<customErrors mode="Off" defaultRedirect="~/Errors/GeneralError.aspx">
<error statusCode="404" redirect="~/Errors/PageNotFound.aspx"/>
</customErrors>

Something that seems suspicious is "YomLocation" within .../YomLocation: A potentially dangerous Request.Path value was detected from the client

You might want to make sure your customErrors are turned "On". This will prevent someone from trying to access pages that could give an error.

[compunerdy]

Here is what it says in my web.config

Code: Select all

<customErrors mode="On" defaultRedirect="~/Errors/GeneralError.aspx">
      <error statusCode="404" redirect="~/Errors/PageNotFound.aspx" />
    </customErrors>

[jmestep]

I have seen weird errors like that from McAfee running the site- they test a lot of urls that don't exist. I have also seen them for search engines like bing bot. I had to email Microsoft abuse once a couple of years ago because they were garbling urls up so badly they were producing hundreds of errors while spidering. To my surprise, they were able to stop the bot.