A few minutes ago, I just recognized the following in the
localhost_access_log:

183.60.48.25 - - [08/Jul/2013:15:15:26 -0400] "CONNECT
tcpconn2.tencent.com:443 HTTP/1.1" 400 -

and then searched all localhost_access_log files and found more
occurrences[1].

This is my first time seeing this type of request, but I assume it is very
similar to the "HEAD /..." request attempts by bots/etc. Based on the 400
server response, I assume that i have nothing to worry about here, but it
seems as though the same IP address is attempting these 'CONNECT ...'
attempts, multiple times per day, almost every day. :(

Any advise on how to handle these requests (if necessary) and/or
information about these type of 'CONNECT ...' requests would be
appreciated. Thanks.


[1] https://gist.github.com/smithh032772/5951621

Reply via email to