Amazon Beanstalk / Cloudwatch Log Weird nginx logs upon Beanstalk creation

1

I'm new to AWS and I'm trying to set up an Express server on Beanstalk and I'm logging to Cloudwatch.

I just set it up and got all the HTTPS stuff going and I'm able to use it on my app, but I noticed there were some weird logs in the nginx/error.log and nginx/access.log

nginx/access.log

xxx.xx.xx.xxx - - [27/Mar/2023:19:40:40 +0000] "\x16\x03\x01\x00\xA7\x01\x00\x00\xA3\x03\x03\x9E\xF3D\x02\x03\xD0R\xAAW\xA6\x7F]*U\x8A\xAC\x10\x22P \x8E\xA6\x10\x1F" 400 150 "-" "-" "-"

nginx/error.log

19:58:56 [warn] 9004#9004: *143823 using uninitialized "year" variable while logging request, client: xxx.xx.xx.xxx, server: , request: "��[�)�!▴�0��햱�HX��6�]$w_�z� ����xB��}{�p+�1l3~�G��>��n�&�+�/�#�'� ��,�0�$�(��"
19:58:56 [warn] 9004#9004: *143823 using uninitialized "month" variable while logging request, client: xxx.xx.xx.xxx, server: , request: "��[�)�!▴�0��햱�HX��6�]$w_�z� ����xB��}{�p+�1l3~�G��>��n�&�+�/�#�'� ��,�0�$�(��"
19:58:56 [warn] 9004#9004: *143823 using uninitialized "day" variable while logging request, client: xxx.xx.xx.xxx, server: , request: "��[�)�!▴�0��햱�HX��6�]$w_�z� ����xB��}{�p+�1l3~�G��>��n�&�+�/�#�'� ��,�0�$�(��"

I tried looking it up and all I got was someone else saying someone was trying to constantly ping me. Is this something I need to worry about? If not, is there a way to get rid of these logs so it doesn't clutter my logs? Would I just have to block these IP addresses?

Let me know if I need to provide more information, thank you!

1 Answer
0

Looks like a client is sending junk HTTP requests to your application. You could consider blocking the IP if the requests continue. Consider using a firewall such as WAF as a layer of protection against attacks from known/unwanted hosts.

https://repost.aws/knowledge-center/elastic-beanstalk-host-attacks https://aws.amazon.com/waf/

AWS
answered 4 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions