Thanks, Adam. I was under the impression Adobe support would look at these threads from time to time, but if not, then okay.
To answer your questions:
* This is being written to the application.log. I see dozens if not hundreds of them in a row, which make me feel a little bit like someone is trying to hack something. These groupings show up randomly, there does not seem to be a pattern, and like i said they go on and on, this is just a snippet:
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
"Warning","ajp-bio-8012-exec-887","09/05/13","07:56:53","CFADMIN","Une xpected characters found in locale."
* I'm not sure what you mean by what "locale" my site is running under. This is just normal US version.
* I doubt I have actual ColdFusion code with non-ASCII characters in it (how would that even happen?), but in theory maybe someone (a hacker?) is trying to submit non-ASCII code into one of my forms or URL variables or something? If so the URLScan utlity, among other things, should catch that, but again I'm not too sure.
* In the coldfusion-out.log I see something similar, like this, but I don't think it helps. Coldfusion-out.log seems to collect just about everything being written to every other log. No other logs have anything around this time.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
Sep 5, 2013 07:56:53 AM Warning [ajp-bio-8012-exec-887] - Unexpected characters found in locale.
The only other thing I notice, which is what leads me to believe this is some sort of hack attempt, is that peppered in between these "Unexpected characters" groups are a few lines like this:
"Error","ajp-bio-8012-exec-934","09/05/13","07:34:54","cfadmin","Eleme nt JSCRIPT is undefined in ATTRIBUTES. The specific sequence of files included or processed is: C:\ColdFusion10\cfusion\wwwroot\CFIDE\adminapi\customtags\l10n.cfm, line: 129 "
"Error","ajp-bio-8012-exec-934","09/05/13","07:35:19","cfadmin","Eleme nt JSCRIPT is undefined in ATTRIBUTES. The specific sequence of files included or processed is: C:\ColdFusion10\cfusion\wwwroot\CFIDE\adminapi\customtags\l10n.cfm, line: 129 "
Thanks for any advice. Btw, our CFIDE is not exposed to the public (i.e., outside of our firewall).