Unusual request URL in ASP.NET health monitoring event

Posted by Troy Hunt on Stack Overflow See other posts from Stack Overflow or by Troy Hunt
Published on 2010-03-28T22:48:12Z Indexed on 2010/03/28 22:53 UTC
Read the original article Hit count: 438

Filed under:
|
|

I’m seeing a rather strange occurrence in the request information section of an ASP.NET health monitoring email I hope someone can shed some light on. This is a publicly facing website which runs on infrastructure at an Indian hosting provider. Health monitoring is notifying us of server errors via automated email but every now and then the requested URL appears as a totally different website. For example:

Request information:
    Request URL: http://www.baidu.com/Default.aspx
    Request path: /Default.aspx
    User host address: 221.13.128.175
    User: 
    Is authenticated: False
    Authentication Type: 
    Thread account name: NT AUTHORITY\NETWORK SERVICE

Obviously the site in question is not Baidu and obviously this attribute is not the referrer either; the “Request URL” value is the path which has generated the error. The IP address is located in Beijing (coincidental given the Baidu address?) and in this instance it looks like the SQL server backend was not accessible (I haven't included the entire error message for security's sake).

What would cause the request URL attribute to be arbitrarily changed to that of another site? I’ve never seen this occur in a health monitoring event before. Thanks!

© Stack Overflow or respective owner

Related posts about ASP.NET

Related posts about health-monitoring