This question already has an answer here:
I have a website and I have email reports when 500 errors occur. Many of these errors occur because "hackers" are running scripts to look for common vulnerabilities or access to admin interfaces - attempting to get to pages such as
This has happened 3 times in the past week and I can see that one's IP is in Russia and the other is in China. I understand they may be behind 7 proxies but interesting nevertheless.
Is this common? How should we react to this? I'm considered blocking 'Python-urllib' user agent but nifty users can simply include a custom user agent in their header so that's not a comprehensive measure.