I built a small blog website by myself. When I woke up this morning and looked at the nginx log, it was all these things!
Is this being used as a meat machine to grab tickets at 12306?
为情所困2017-05-16 17:21:13
It doesn’t matter. CONNECT is a request sent by the browser to the proxy. nginx does not enable the proxy by default, so it returns 400, so don't worry.
It should be software that uses software to scan proxy servers. Common scans include GET /phpadmin/setup.php GET /moadmin/moadmin.php and so on. In fact, it is just a software scan that traverses all IPs.
