Skip to content

[Fix/#56] 스캐너·봇으로 인한 401 로그 노이즈 정리 #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tnals0924 merged 2 commits into from
Sep 22, 2026
Merged

[Fix/#56] 스캐너·봇으로 인한 401 로그 노이즈 정리 #57

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
dcf66ac
fix: 401 인증 실패 로그 레벨을 DEBUG로 낮춤
tnals0924 Sep 22, 2026
624d6fc
chore: 스캐너 노이즈 경로를 액세스 로그에서 제외
tnals0924 Sep 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions api/common-api/src/main/java/kr/ac/kookmin/stream/api/common/GlobalExceptionHandler.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,8 +23,14 @@ public class GlobalExceptionHandler {

@ExceptionHandler(BusinessException.class)
public ResponseEntity<ApiResponse<Void>> handleBusiness(BusinessException e) {
log.warn("[requestId={}, userId={}] ({}) {}",
MDC.get(REQUEST_ID), MDC.get(USER_ID), e.getErrorCode().name(), e.getMessage());
// 인증 실패(401)는 인터넷에 노출된 서버에서 스캐너·봇으로 인해 상시 발생하는 정상 트래픽이므로 DEBUG로 낮춘다
if (e.getErrorCode().status() == ErrorStatus.UNAUTHORIZED) {
log.debug("[requestId={}, userId={}] ({}) {}",
MDC.get(REQUEST_ID), MDC.get(USER_ID), e.getErrorCode().name(), e.getMessage());
} else {
log.warn("[requestId={}, userId={}] ({}) {}",
MDC.get(REQUEST_ID), MDC.get(USER_ID), e.getErrorCode().name(), e.getMessage());
}
return ResponseEntity.status(e.getErrorCode().status()).body(ApiResponse.error(e));
}

Expand Down
8 changes: 7 additions & 1 deletion gateway/logging/src/main/java/kr/ac/kookmin/stream/logging/LoggingExclusions.java
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,20 +1,26 @@
package kr.ac.kookmin.stream.logging;

import jakarta.servlet.http.HttpServletRequest;
import java.util.Set;
import lombok.AccessLevel;
import lombok.NoArgsConstructor;

/**
* 로깅 필터가 건너뛸 요청 판별. 헬스체크는 빈번히 폴링되므로 MDC·액세스 로그 대상에서 제외한다.
* 경로는 액추에이터 기본값이자 security 모듈 {@code PublicEndpoints.HEALTH_CHECK}와 같은 값이다.
* 또한 브라우저·크롤러·스캐너가 상시 찔러보는 노이즈 경로도 제외한다.
*/
@NoArgsConstructor(access = AccessLevel.PRIVATE)
final class LoggingExclusions {

private static final String HEALTH_CHECK_PATH = "/actuator/health";

// 실존 엔드포인트가 아니지만 브라우저·크롤러·봇 스캐너가 상시 요청해 401 노이즈만 남기는 경로
private static final Set<String> NOISE_PATHS = Set.of("/", "/robots.txt", "/favicon.ico");

static boolean isExcluded(HttpServletRequest request) {
String path = request.getRequestURI();
return path.equals(HEALTH_CHECK_PATH) || path.startsWith(HEALTH_CHECK_PATH + "/");
return path.equals(HEALTH_CHECK_PATH) || path.startsWith(HEALTH_CHECK_PATH + "/")
|| NOISE_PATHS.contains(path);
}
}
Loading