Need help understanding strange traffic...
Complete rookie would appreciate some edification…
My droplet was up for little more than a couple of hours and I was seeing some strange traffic in the logs:
IP Request Status Size 126.96.36.199 CONNECT 50na50.net:80 HTTP/1.1 200 12364 188.8.131.52 CONNECT d0na50.net:80 HTTP/1.1 200 12364 184.108.40.206 CONNECT tiras.tk:80 HTTP/1.1 200 12364 220.127.116.11 CONNECT hideface.tk:80 HTTP/1.1 200 12364
Can someone explain why these requests were successful?
What 12k was served?
Should I be worried (do I need to take action?) I already blocked IP in .htaccess
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.