Why error messages for nonexistent jsp pages in logs?

Question

I am seeing error messages for nonexistent jsp pages in my logs.There are no equivalent .cfm pages. We're on version 7.02. Examples:

In Coldfusion-out.log:

07/07 20:22:39 error Requested resource '/is/api.jsp' (%2fis%2fapi.jsp) not found

This is a valid directory but there is no such file

In Coldfusion-err.log:

07/07 19:42:28 error Requested resource '/is/admin.jsp' (%2fis%2fadmin.jsp) not found

This is a valid directory but there is no such file

In Coldfusion-event.log:

07/07 20:22:50 error Requested resource '/is/service.jsp' (%2fis%2fservice.jsp) not found

This is a valid directory but there is no such file

Thanks in advance for any help!

Richard

Charlie Arehart · Answer

Richard, I suspect that would just be some bad guy trying various URLs to see if he can "get in" to admin pages on your site. They don't know what you do or don't have, so they throw various requests at your site and hope it may respond with an opened front door.

Think of it like marketing robocalls or junk mail you get. A nuisance, and nothing to worry about in these cases as the errors show that they "knocked and no one answered" (the page the requested did not exist).

If you know you have NO JSP pages you serve in your site, then you can use tools in your web server to block any such requests. In IIS, it's as simple as adding .jsp to the list of rejected file extensions in its "Request Filtering" feature (available in IIS 7 and above). In Apache, you could do it with htaccess or mod_rewrite.

Hope that's helpful.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded