Jump to content

Lots of HTTP Get requests

Swynol

By Swynol
in General/Windows

 Share

Recommended Posts

Swynol

Swynol 375

Posted
Posted (edited)

Anyone able to shed some light on the below. Seeing alot of these in my logs. happening at early hours of the morning when nothing much should be going on.

2018-01-20 03:05:18.541 Info HttpServer: HTTP GET http://emby.mydomain.com:8096/emby/users/ec5501dc8d74408156161ddacb1cb197f/items/6ddcc6ebee7099f2bf63c72e46def92f. UserAgent:
2018-01-20 03:05:18.562 Info HttpServer: HTTP Response 200 to MYWANADRESS. Time: 21ms. http://emby.mydomain.com:8096/emby/users/ec5501dc8d74408156161ddacb1cb197f/items/6ddcc6ebee7099f2bf63c72e46def92f
2018-01-20 03:05:18.567 Info HttpServer: HTTP GET http://emby.mydomain.com:8096/emby/users/ec5501dc8d74408156161ddacb1cb197/items/6e2091760657149e4032dfe98fba2a75. UserAgent
Edited by Swynol
  • Like 1
Luke Emby Team

Luke 42078

Posted
Posted

Hard to say without a user agent. All Emby apps will include a user agent.

CBers

CBers 7450

Posted
Posted

Is it the nuVue app?

pir8radio

pir8radio 1312

Posted
Posted (edited)

who is that user?    when you login as admin then paste the below into your browser who comes up?  Might help you troubleshoot.

https://yourserver.com/web/useredit.html?userId=ec5501dc8d74408156161ddacb1cb197f
Edited by pir8radio
Swynol

Swynol 375

Posted
  • Author
Posted (edited)

its a user account that has admin priv, but is never used. not logged into any apps.

 

EDIT: seems to be linked to the NuVue app

Edited by Swynol
Swynol

Swynol 375

Posted
  • Author
Posted

another EDIT. not convienced it is is NuVue. 

 

getting more requests with no User Agent. the IP is the IP of my Emby Server

2018-01-23 11:56:48.250 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 8ms. http://192.168.10.10:8096/Items?Ids=1faaa2fdbefc876ad0e80ec27cb581b6
2018-01-23 11:56:48.251 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=685f47163de4fcf3c4f09d8278189eb4. UserAgent:
pir8radio

pir8radio 1312

Posted
Posted

 

another EDIT. not convienced it is is NuVue. 

 

getting more requests with no User Agent. the IP is the IP of my Emby Server

2018-01-23 11:56:48.250 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 8ms. http://192.168.10.10:8096/Items?Ids=1faaa2fdbefc876ad0e80ec27cb581b6
2018-01-23 11:56:48.251 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=685f47163de4fcf3c4f09d8278189eb4. UserAgent:

 

 

I wouldn't be alarmed yet,  I get tons of non agent requests when using the "movie poster app"  you can always disable that admin user and see what breaks..  Or disable it to be safe until you figure out whats going on.  Your nginx/emby logs don't show what IP you are responding too?

Angelblue05

Angelblue05 4132

Posted
Posted

You have emby for kodi installed?

CBers

CBers 7450

Posted
Posted

You have emby for kodi installed?

I do, but it's not left running. No Kodi sync plugin either.

 

@@Luke - something is connecting to the server via the domain from the settings page but then using the local port and not supplying a User Agent.

 

I don't have any non-official Emby app installed.

 

I've even uninstalled the 2 Chrome extensions I had, but I'm still seeing the following in the logs repeatedly.

 

2018-01-23 00:05:03.426 Info HttpServer: HTTP GET http://mydomain:8988/emby/users/ec5501dc8d74408fb8acddacb1cb197f/items/0b08bab6f30faa342bd6552605e4c557. UserAgent:
Any thoughts please?

 

Can you add any further logging to the server?

 

Emby sits behind a nginx reverse proxy.

 

Thanks.

ebr Emby Team

ebr 16177

Posted
Posted

What user and item is that?

 

What plug-ins do you have installed?

CBers

CBers 7450

Posted
Posted

What user and item is that?

 

What plug-ins do you have installed?

Only official Emby ones.

 

I'm now wondering if it's Ombi or Organizr.

 

Will disable them and see if the messages stop.

ebr Emby Team

ebr 16177

Posted
Posted

Only official Emby ones.

 

I'm now wondering if it's Ombi or Organizr.

 

Neither of those are created by us...

CBers

CBers 7450

Posted
Posted

Neither of those are created by us...

I know.

 

If either, then I'll contact the devs.

Swynol

Swynol 375

Posted
  • Author
Posted

I wouldn't be alarmed yet,  I get tons of non agent requests when using the "movie poster app"  you can always disable that admin user and see what breaks..  Or disable it to be safe until you figure out whats going on.  Your nginx/emby logs don't show what IP you are responding too?

 

I'm not too bothered. just wondering what it is. It responds to itself

2018-01-23 14:46:51.080 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=5b9dfgdgfdghg38e3434bec2170ae3e6522. UserAgent:
2018-01-23 14:46:51.082 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 2ms. http://192.168.10.10:8096/Items?Ids=5b9bf773hfghgfhfg34bec2170ae3e6522

You have emby for kodi installed?

 

no never used it

 

What user and item is that?

 

What plug-ins do you have installed?

 

coverart and trakt

 

I'm also using Organizr and Ombi, although i disabled ombi and i can still see these appearing in the logs

pir8radio

pir8radio 1312

Posted
Posted

I'm not too bothered. just wondering what it is. It responds to itself

2018-01-23 14:46:51.080 Info HttpServer: HTTP GET http://192.168.10.10:8096/Items?Ids=5b9dfgdgfdghg38e3434bec2170ae3e6522. UserAgent:
2018-01-23 14:46:51.082 Info HttpServer: HTTP Response 200 to 192.168.10.10. Time: 2ms. http://192.168.10.10:8096/Items?Ids=5b9bf773hfghgfhfg34bec2170ae3e6522

 

So it responds to itself...   So its a local application on the same PC as emby?   You'll find it...   :)

Swynol

Swynol 375

Posted
  • Author
Posted

ye i have a few services running on the same machine. Wondering if its NGINX, i have Organizr running on NGINX same as Cbers

 

most the time is responds to itself, sometimes it responds to my WAN IP

CBers

CBers 7450

Posted
Posted

Looks like it's Ombi that is the culprit.

 
I'll point the dev (Jamie) at this thread.
Swynol

Swynol 375

Posted
  • Author
Posted

with me, i'm not sure if its Ombi or Organizr

  • Like 1
CBers

CBers 7450

Posted
Posted

For me, it's Ombi.

 

I have disabled Organizr and only have Ombi running and still seeing those messages.

ebr Emby Team

ebr 16177

Posted
Posted

So, there is actually no problem here, correct?

CBers

CBers 7450

Posted
Posted

So, there is actually no problem here, correct?

Not from an Emby point of view I don't think, but not sure why the app (Ombi/Organizr) is adding the local port to the reverse proxy address, so may just be a bug in the app, unless it's Emby passing that info to the app, as I don't provide the local port to either Ombi or Organizr.

pir8radio

pir8radio 1312

Posted
Posted

Not from an Emby point of view I don't think, but not sure why the app (Ombi/Organizr) is adding the local port to the reverse proxy address, so may just be a bug in the app, unless it's Emby passing that info to the app, as I don't provide the local port to either Ombi or Organizr.

 

that is emby doing that in their logs i believe...    Yea no emby issue, the client "apps" should be adding an agent header but they don't. 

CBers

CBers 7450

Posted
Posted

that is emby doing that in their logs i believe... Yea no emby issue, the client "apps" should be adding an agent header but they don't.

Jamie is going to add a UserAgent string to Ombi for the next beta release.

CBers

CBers 7450

Posted
Posted

UserAgent added now for Ombi and it was Ombi.

 

2018-01-24 08:31:05.106 Info HttpServer: HTTP GET http://mydomain:8988/emby/users/a08711a48b194896b8cc7961d7d28bae/items/fffbcf68159ce5101a0e4a8447ac06a1. UserAgent: Ombi

Still don't understand how/why it's putting the local port in the call though.

QDivision

QDivision 42

Posted
Posted (edited)

Just to chime in here,

 

I have seen Emby adding in the local port instead of the external port to requests when requesting a playback item through the web app. I can provide logs if required but hasn't really been an issue. Just meant I needed to port forward the standard 8096 (external) => 8096 (internal), 8920 (external) => 8920 (internal) as well as the standard HTTP/S ports to the internal ports.

 

Before I just had the HTTP/S ports forward which worked but I saw the 8920/8096 ports in the logs for external requests which were causing longer playback times.

 

(I have the internal ports set as 8096/8920 and the external ports as 80/443 in Emby config)

 

Just though I would let you guys know.

 

Keep up the good work!

 

EDIT: attached log so you can see what I mean.

 

e.g.

 

2018-01-24 09:55:02.751 Info HttpServer: HTTP GET https://www.*********.co.uk:8920/emby/System/Logs.UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36
2018-01-24 09:55:02.751 Info HttpServer: HTTP GET https://www.*********.co.uk:8920/emby/System/Configuration.UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36

Log.txt

Edited by thomasorr
  • Like 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing
×
×
  • Create New...