Copy link to clipboard
Copied
I am seeing error messages for nonexistent jsp pages in my logs.There are no equivalent .cfm pages. We're on version 7.02. Examples:
In Coldfusion-out.log:
07/07 20:22:39 error Requested resource '/is/api.jsp' (%2fis%2fapi.jsp) not found
This is a valid directory but there is no such file
In Coldfusion-err.log:
07/07 19:42:28 error Requested resource '/is/admin.jsp' (%2fis%2fadmin.jsp) not found
This is a valid directory but there is no such file
In Coldfusion-event.log:
07/07 20:22:50 error Requested resource '/is/service.jsp' (%2fis%2fservice.jsp) not found
This is a valid directory but there is no such file
Thanks in advance for any help!
Richard
Copy link to clipboard
Copied
Richard, I suspect that would just be some bad guy trying various URLs to see if he can "get in" to admin pages on your site. They don't know what you do or don't have, so they throw various requests at your site and hope it may respond with an opened front door.
Think of it like marketing robocalls or junk mail you get. A nuisance, and nothing to worry about in these cases as the errors show that they "knocked and no one answered" (the page the requested did not exist).
If you know you have NO JSP pages you serve in your site, then you can use tools in your web server to block any such requests. In IIS, it's as simple as adding .jsp to the list of rejected file extensions in its "Request Filtering" feature (available in IIS 7 and above). In Apache, you could do it with htaccess or mod_rewrite.
Hope that's helpful.