[plug] Recent increase in SSL probes

[Leon Wright]

I know there has been recent threads on SAGE-AU noting similar.

Not sure why though.

Leon

--
DRM 'manages access' in the same way that jail 'manages freedom.'

# cat /dev/mem | strings | grep -i cats
Damn, my RAM is full of cats... MEOW!!

On Tue, Dec 16, 2014 at 11:07 AM, Brad Campbell <brad at fnarfbargle.com>
wrote:
>
> G'day all,
>
> In the last couple of days we've seen an exponential increase in probes on
> ssh and new hits on imap. Notable because we've never seen the hits on the
> imap server before :
>
> dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>,
> rip=99.56.220.255, lip=192.168.2.1, TLS handshaking: SSL_accept() failed:
> error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol,
> session=<K/n1XR0KQwBjONz/>
>
> Anyone else know what is going on ?
>
> _______________________________________________
> PLUG discussion list: plug at plug.org.au
> http://lists.plug.org.au/mailman/listinfo/plug
> Committee e-mail: committee at plug.org.au
> PLUG Membership: http://www.plug.org.au/membership
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20141216/4e81ac44/attachment.html>