I noticed this the other day in the firewall logs:
attackip: 59.103.215.235
reason: The SSL session failed. This may be a configuration error, or it may be an attempt to subvert the protocol. Connection closed.
information: SSL_accept
SSL routines:SSL3_GET_CLIENT_HELLO:no...