[plug] Recent increase in SSL probes

Brad Campbell brad at fnarfbargle.com
Tue Dec 16 03:07:43 UTC 2014


G'day all,

In the last couple of days we've seen an exponential increase in probes 
on ssh and new hits on imap. Notable because we've never seen the hits 
on the imap server before :

dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, 
rip=99.56.220.255, lip=192.168.2.1, TLS handshaking: SSL_accept() 
failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown 
protocol, session=<K/n1XR0KQwBjONz/>

Anyone else know what is going on ?



More information about the plug mailing list