There are inexplicably many connections to zhidao.baidu.com in the nginx error log. What is going on?

Question

nginx log is as follows, very confused

Answer 1

The answer above is not accurate. This is because someone is using your server as an http proxy (as for why, it can be to use your machine as a DDoS springboard, or as a crawler springboard, because many large websites will block frequently accessed IPs. So there will be tools that continuously scan available http proxy servers on the network). Of course, because you have not configured a proxy, this information will not be valid. It may be just testing

Once again, remind everyone to take a look at the http protocol. If you see that the http request is a GET http://xxxx/xxxx这种完整的url地址，而不是常规的GET /xxxx resource address, then it means that the other party is using the http proxy protocol to access your server

Answer 2

It seems that someone has resolved the domain name zhidao.baidu.com to your server address.

Answer 3

Block that IP