ArcGIS Server will ignore invalid layer IDs in REST URLs even for downloads.

Workaround

As confirmed with Product Security Incident Response Team (PSIRT) from a security standpoint, there is no impact—this issue is informative. However, this issue generates unnecessary noise and false positives because the expectation is that an invalid path results in an HTTP 404 error.

Steps to Reproduce