Web server: Nginx.
Checking our log files, there are many log entries of connections that:
- take 59-61 seconds
- send an empty request (or at least none is logged)
- result in a 408 response (request timed out)
- do not contain any http_user_agent
- originate from a limited number of IPs
We are monitoring average times to serve responses and this obviously inflates our statistics. Apart from that though, is this a problem? Any idea why it is occurring? Does it suggest that somebody is intentionally messing with us? What should we do?