Lots of 408 Request Timed Out from same IPs
- by GreatFire
Web server: Nginx.
Checking our log files, there are many log entries of connections that:
take 59-61 seconds
send an empty request (or at least none is logged)
result in a 408 response (request timed out)
do not contain any http_user_agent
originate from a limited number of IPs
We are monitoring average times to serve responses and this obviously inflates our statistics. Apart from that though, is this a problem? Any idea why it is occurring? Does it suggest that somebody is intentionally messing with us? What should we do?