Why error messages for nonexistent jsp pages in logs?

Engaged ,
Jul 10, 2015 Jul 10, 2015

Copy link to clipboard

Copied

I am seeing error messages for nonexistent jsp pages in my logs.There are no equivalent .cfm pages. We're on version 7.02. Examples:

In Coldfusion-out.log:

07/07 20:22:39 error Requested resource '/is/api.jsp' (%2fis%2fapi.jsp) not found

This is a valid directory but there is no such file

In Coldfusion-err.log:

07/07 19:42:28 error Requested resource '/is/admin.jsp' (%2fis%2fadmin.jsp) not found

This is a valid directory but there is no such file


In Coldfusion-event.log:

07/07 20:22:50 error Requested resource '/is/service.jsp' (%2fis%2fservice.jsp) not found

This is a valid directory but there is no such file


Thanks in advance for any help!

Richard


Views

242

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Adobe Community Professional ,
Jul 17, 2015 Jul 17, 2015

Copy link to clipboard

Copied

LATEST

Richard, I suspect that would just be some bad guy trying various URLs to see if he can "get in" to admin pages on your site. They don't know what you do or don't have, so they throw various requests at your site and hope it may respond with an opened front door.

Think of it like marketing robocalls or junk mail you get. A nuisance, and nothing to worry about in these cases as the errors show that they "knocked and no one answered" (the page the requested did not exist).

If you know you have NO JSP pages you serve in your site, then you can use tools in your web server to block any such requests. In IIS, it's as simple as adding .jsp to the list of rejected file extensions in its "Request Filtering" feature (available in IIS 7 and above). In Apache, you could do it with htaccess or mod_rewrite.

Hope that's helpful.


/Charlie (server troubleshooter, carehart.org)

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines