What's new

Router hourly scans LAN web server

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

cricket_007

New Around Here
Hi,

I initially thought this access log traffic was caused by requests being forwarded through the router, but tail-ing the access log and making a single request did not demonstrate this behavior. I inspected my logs closer and noticed a very consistent hourly access to my web server directly from the router's IP address. The web server is running on another device in my LAN, not on the router.

A quick internet search hasn't brought me to anything mentioning this, but is there some configuration in the WebUI or some service I can stop that'll stop "ping-ing" my web server? I haven't personally installed any monitoring tools on the router that would be doing this.

If the model is important it is an AC66U running build 380.57.

Sample Log

Code:
192.168.1.1 - - [04/Jan/2016:00:01:09 -0600] "GET / HTTP/1.1" 200 613 "-" "-"
192.168.1.1 - - [04/Jan/2016:01:00:56 -0600] "GET / HTTP/1.1" 200 613 "-" "-"
192.168.1.1 - - [04/Jan/2016:02:00:36 -0600] "GET / HTTP/1.1" 200 613 "-" "-"
192.168.1.1 - - [04/Jan/2016:03:01:01 -0600] "GET / HTTP/1.1" 200 613 "-" "-"
192.168.1.1 - - [04/Jan/2016:04:01:07 -0600] "GET / HTTP/1.1" 200 613 "-" "-"
192.168.1.1 - - [04/Jan/2016:05:01:07 -0600] "GET / HTTP/1.1" 200 613 "-" "-"
 
That's most likely the networkmap process running on the router looking to update the list of attached clients and their types. Right now, there isn't a way to disable it that I know of.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top