ASP Net Core - Server receives multiple GET requests repeatedly

Asked

Viewed 143 times

0

Hello, I have a server hosted on an EC2 instance, Ubuntu Server on Amazon AWS. No one is making requests to this server, however, logs presented in Cloudwatch indicate multiple GET operations followed by POST, below are operations that are repeated indefinitely:

[6/9/18 4:22:14 AM] Information: Request Starting HTTP/1.1 GET http:// MY EC2 PRIVATE IP -

[6/9/18 4:22:14 AM] Information: Executing action method Api.Controllers.Initialller.Helloworld (Api) with Arguments ((null)) - Modelstate is Valid -

[6/9/18 4:22:14 AM] Information: Executing Objectresult, writing value Microsoft.AspNetCore.Mvc.Controllercontext. -

[6/9/18 4:22:14 AM] Information: Executed action Api.Controllers.Initialsller.Helloworld (Api) in 0.1211ms -

[6/9/18 4:22:14 AM] Information: Request finished in 0.2695ms 200 application/json; charset=utf-8 -

[6/9/18 4:22:33 AM] Information: Request Starting HTTP/1.1 POST http://coresvcs.samsungcloudprint.com/SOMETHING/client application/json 116 -

[6/9/18 4:22:33 AM] Information: Request finished in 0.3534ms 404 -

Repeats...

These above operations are repeated indefinitely, all the same as above, I wish to understand what is happening, if it is an error in my server’s programming, moreover, understand why it is being performing a POST after a GET. How to fix this?

Thank you

2 answers

1

Try to capture the source IP address of these requests, they can be robos, as said by Julio, but it can also be some Load Balance configuration to check if the service is active (in the case of get), already in the case of the POST request, I could see something about Samsung cloud print, it may be that someone has set up a printer on that same ip and the service keeps "dripping" to check the activity, try changing the IP address of EC2 to check if these requests continue. If Diver any linked DNS, change the IP but do not change the DNS, if it stops the flames, change the DNS to the current ip, if the calls come back, it may be someone calling directly in your configured DNS address.

  • Thank you! The GET requests for the private EC2 IP address were from EC2’s Healthy Check (set up every 30 seconds). However, I still don’t understand what those Samsung cloud print POST operations are

  • Ever tried to change the IP ? As I said, it might be some existing programming there in the service from Samsung to the IP you are using.

0

Browser other questions tagged

You are not signed in. Login or sign up in order to post.