Amazon Beanstalk / Cloudwatch Log Weird nginx logs upon Beanstalk creation

1

I'm new to AWS and I'm trying to set up an Express server on Beanstalk and I'm logging to Cloudwatch.

I just set it up and got all the HTTPS stuff going and I'm able to use it on my app, but I noticed there were some weird logs in the nginx/error.log and nginx/access.log

nginx/access.log

xxx.xx.xx.xxx - - [27/Mar/2023:19:40:40 +0000] "\x16\x03\x01\x00\xA7\x01\x00\x00\xA3\x03\x03\x9E\xF3D\x02\x03\xD0R\xAAW\xA6\x7F]*U\x8A\xAC\x10\x22P \x8E\xA6\x10\x1F" 400 150 "-" "-" "-"

nginx/error.log

19:58:56 [warn] 9004#9004: *143823 using uninitialized "year" variable while logging request, client: xxx.xx.xx.xxx, server: , request: "��[�)�!▴�0��햱�HX��6�]$w_�z� ����xB��}{�p+�1l3~�G��>��n�&�+�/�#�'� ��,�0�$�(��"
19:58:56 [warn] 9004#9004: *143823 using uninitialized "month" variable while logging request, client: xxx.xx.xx.xxx, server: , request: "��[�)�!▴�0��햱�HX��6�]$w_�z� ����xB��}{�p+�1l3~�G��>��n�&�+�/�#�'� ��,�0�$�(��"
19:58:56 [warn] 9004#9004: *143823 using uninitialized "day" variable while logging request, client: xxx.xx.xx.xxx, server: , request: "��[�)�!▴�0��햱�HX��6�]$w_�z� ����xB��}{�p+�1l3~�G��>��n�&�+�/�#�'� ��,�0�$�(��"

I tried looking it up and all I got was someone else saying someone was trying to constantly ping me. Is this something I need to worry about? If not, is there a way to get rid of these logs so it doesn't clutter my logs? Would I just have to block these IP addresses?

Let me know if I need to provide more information, thank you!

1 Antwort
0

Looks like a client is sending junk HTTP requests to your application. You could consider blocking the IP if the requests continue. Consider using a firewall such as WAF as a layer of protection against attacks from known/unwanted hosts.

https://repost.aws/knowledge-center/elastic-beanstalk-host-attacks https://aws.amazon.com/waf/

AWS
beantwortet vor 4 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen