I have created a ghost VPS on DigitalOcean which has nginx running as a reverse proxy fronting ghost installation. While tailing access logs I saw numerous CONNECT commands and GET/POST as well to some websites (some spammy, fake and some legit ones - nandos.co.uk). So my questions are
- Is nginx acting on these commands?
- If so how can I prevent this?
- Are they DOSing people? Inflating traffic? or some other shenanigan?
Note: I don't have the nginx conf since I rebuilt the VPS almost immediately afterwards.