&gt; I&#x27;d be more interesting in seeing the result of letting the connections succeed<p>Or route them to an internal system with a promiscuous HTTP server that gives a 200 response to any request.  One could then parse the logs to see which URLs were being requested.