Need help understanding strange traffic...
Complete rookie would appreciate some edification…
My droplet was up for little more than a couple of hours and I was seeing some strange traffic in the logs:
IP Request Status Size 220.127.116.11 CONNECT 50na50.net:80 HTTP/1.1 200 12364 18.104.22.168 CONNECT d0na50.net:80 HTTP/1.1 200 12364 22.214.171.124 CONNECT tiras.tk:80 HTTP/1.1 200 12364 126.96.36.199 CONNECT hideface.tk:80 HTTP/1.1 200 12364
Can someone explain why these requests were successful?
What 12k was served?
Should I be worried (do I need to take action?) I already blocked IP in .htaccess