Search code examples
asp.netexceptionrequestdangerous-request

Potentially dangerous Request.Form value - Exception

today I receive multiple (50->*) e-mails regarding: 

A potentially dangerous Request.Form value was detected from the client (ctl00$Content$InputStreet="OzgYPY  <a href="http://effe...").

and

A potentially dangerous Request.Form value was detected from the client (ctl00$Content$InputStreet="GVdtWm  <a href="http://mxif...").

and

...

on one of my websites. In Global I have some code which sends e-mail when exceptions occur.

The IP address the requests come from is not the same. Is my site under some kind of attack?

Best regards, Lasse Espeholt

Solution

  • These kind of attacks are common, we're monitoring several hundred sites for clients and are building a database of these attacks currently.

    The fact that ASP.NET protects against these is good. you're 'secure by default'.

    Cheers,

    Phil.