Jump to content

Lots of HTTP Get requests


Swynol

Recommended Posts

Swynol

Anyone able to shed some light on the below. Seeing alot of these in my logs. happening at early hours of the morning when nothing much should be going on.

2018-01-20 03:05:18.541 Info HttpServer: HTTP GET http://emby.mydomain.com:8096/emby/users/ec5501dc8d74408156161ddacb1cb197f/items/6ddcc6ebee7099f2bf63c72e46def92f. UserAgent:
2018-01-20 03:05:18.562 Info HttpServer: HTTP Response 200 to MYWANADRESS. Time: 21ms. http://emby.mydomain.com:8096/emby/users/ec5501dc8d74408156161ddacb1cb197f/items/6ddcc6ebee7099f2bf63c72e46def92f
2018-01-20 03:05:18.567 Info HttpServer: HTTP GET http://emby.mydomain.com:8096/emby/users/ec5501dc8d74408156161ddacb1cb197/items/6e2091760657149e4032dfe98fba2a75. UserAgent
Edited by Swynol
  • Like 1
Link to comment
Share on other sites

pir8radio

who is that user?    when you login as admin then paste the below into your browser who comes up?  Might help you troubleshoot.

https://yourserver.com/web/useredit.html?userId=ec5501dc8d74408156161ddacb1cb197f
Edited by pir8radio
Link to comment
Share on other sites

Swynol

its a user account that has admin priv, but is never used. not logged into any apps.

 

EDIT: seems to be linked to the NuVue app

Edited by Swynol
Link to comment
Share on other sites

Swynol

another EDIT. not convienced it is is NuVue. 

 

getting more requests with no User Agent. the IP is the IP of my Emby Server

2018-01-23 11:56:48.250 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 8ms. http://192.168.10.10:8096/Items?Ids=1faaa2fdbefc876ad0e80ec27cb581b6
2018-01-23 11:56:48.251 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=685f47163de4fcf3c4f09d8278189eb4. UserAgent:
Link to comment
Share on other sites

pir8radio

 

another EDIT. not convienced it is is NuVue. 

 

getting more requests with no User Agent. the IP is the IP of my Emby Server

2018-01-23 11:56:48.250 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 8ms. http://192.168.10.10:8096/Items?Ids=1faaa2fdbefc876ad0e80ec27cb581b6
2018-01-23 11:56:48.251 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=685f47163de4fcf3c4f09d8278189eb4. UserAgent:

 

 

I wouldn't be alarmed yet,  I get tons of non agent requests when using the "movie poster app"  you can always disable that admin user and see what breaks..  Or disable it to be safe until you figure out whats going on.  Your nginx/emby logs don't show what IP you are responding too?

Link to comment
Share on other sites

CBers

You have emby for kodi installed?

I do, but it's not left running. No Kodi sync plugin either.

 

@@Luke - something is connecting to the server via the domain from the settings page but then using the local port and not supplying a User Agent.

 

I don't have any non-official Emby app installed.

 

I've even uninstalled the 2 Chrome extensions I had, but I'm still seeing the following in the logs repeatedly.

 

2018-01-23 00:05:03.426 Info HttpServer: HTTP GET http://mydomain:8988/emby/users/ec5501dc8d74408fb8acddacb1cb197f/items/0b08bab6f30faa342bd6552605e4c557. UserAgent: 
 
Any thoughts please?

 

Can you add any further logging to the server?

 

Emby sits behind a nginx reverse proxy.

 

Thanks.

Link to comment
Share on other sites

CBers

What user and item is that?

 

What plug-ins do you have installed?

Only official Emby ones.

 

I'm now wondering if it's Ombi or Organizr.

 

Will disable them and see if the messages stop.

Link to comment
Share on other sites

Only official Emby ones.

 

I'm now wondering if it's Ombi or Organizr.

 

Neither of those are created by us...

Link to comment
Share on other sites

Swynol

I wouldn't be alarmed yet,  I get tons of non agent requests when using the "movie poster app"  you can always disable that admin user and see what breaks..  Or disable it to be safe until you figure out whats going on.  Your nginx/emby logs don't show what IP you are responding too?

 

I'm not too bothered. just wondering what it is. It responds to itself

2018-01-23 14:46:51.080 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=5b9dfgdgfdghg38e3434bec2170ae3e6522. UserAgent:
2018-01-23 14:46:51.082 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 2ms. http://192.168.10.10:8096/Items?Ids=5b9bf773hfghgfhfg34bec2170ae3e6522

You have emby for kodi installed?

 

no never used it

 

What user and item is that?

 

What plug-ins do you have installed?

 

coverart and trakt

 

I'm also using Organizr and Ombi, although i disabled ombi and i can still see these appearing in the logs

Link to comment
Share on other sites

pir8radio

I'm not too bothered. just wondering what it is. It responds to itself

2018-01-23 14:46:51.080 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=5b9dfgdgfdghg38e3434bec2170ae3e6522. UserAgent:
2018-01-23 14:46:51.082 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 2ms. http://192.168.10.10:8096/Items?Ids=5b9bf773hfghgfhfg34bec2170ae3e6522

 

So it responds to itself...   So its a local application on the same PC as emby?   You'll find it...   :)

Link to comment
Share on other sites

Swynol

ye i have a few services running on the same machine. Wondering if its NGINX, i have Organizr running on NGINX same as Cbers

 

most the time is responds to itself, sometimes it responds to my WAN IP

Link to comment
Share on other sites

CBers

For me, it's Ombi.

 

I have disabled Organizr and only have Ombi running and still seeing those messages.

Link to comment
Share on other sites

CBers

So, there is actually no problem here, correct?

Not from an Emby point of view I don't think, but not sure why the app (Ombi/Organizr) is adding the local port to the reverse proxy address, so may just be a bug in the app, unless it's Emby passing that info to the app, as I don't provide the local port to either Ombi or Organizr.

Link to comment
Share on other sites

pir8radio

Not from an Emby point of view I don't think, but not sure why the app (Ombi/Organizr) is adding the local port to the reverse proxy address, so may just be a bug in the app, unless it's Emby passing that info to the app, as I don't provide the local port to either Ombi or Organizr.

 

that is emby doing that in their logs i believe...    Yea no emby issue, the client "apps" should be adding an agent header but they don't. 

Link to comment
Share on other sites

CBers

that is emby doing that in their logs i believe... Yea no emby issue, the client "apps" should be adding an agent header but they don't.

Jamie is going to add a UserAgent string to Ombi for the next beta release.

Link to comment
Share on other sites

CBers

UserAgent added now for Ombi and it was Ombi.

 

2018-01-24 08:31:05.106 Info HttpServer: HTTP GET http://mydomain:8988/emby/users/a08711a48b194896b8cc7961d7d28bae/items/fffbcf68159ce5101a0e4a8447ac06a1. UserAgent: Ombi 

Still don't understand how/why it's putting the local port in the call though.

Link to comment
Share on other sites

QDivision

Just to chime in here,

 

I have seen Emby adding in the local port instead of the external port to requests when requesting a playback item through the web app. I can provide logs if required but hasn't really been an issue. Just meant I needed to port forward the standard 8096 (external) => 8096 (internal), 8920 (external) => 8920 (internal) as well as the standard HTTP/S ports to the internal ports.

 

Before I just had the HTTP/S ports forward which worked but I saw the 8920/8096 ports in the logs for external requests which were causing longer playback times.

 

(I have the internal ports set as 8096/8920 and the external ports as 80/443 in Emby config)

 

Just though I would let you guys know.

 

Keep up the good work!

 

EDIT: attached log so you can see what I mean.

 

e.g.

 

2018-01-24 09:55:02.751 Info HttpServer: HTTP GET https://www.*********.co.uk:8920/emby/System/Logs.UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36
2018-01-24 09:55:02.751 Info HttpServer: HTTP GET https://www.*********.co.uk:8920/emby/System/Configuration.UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36

Log.txt

Edited by thomasorr
  • Like 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...