Since update [1] tomcat(9.0.23) logs failed TLS handshakes with status code 400. This includes requests from mod_proxy_hcheck hcmethod TCP . mod_proxy_hcheck hcmethod can include TLS handshake/probe. [1] https://github.com/apache/tomcat/commit/acf6076d7118571ebc881984b96792f861b72bb2