blanke
June 20, 2016, 2:04pm
1
Hi all,
we observed in our nginx logs that calls are SSL-encrypted, although we did not specify any SSL connection (just http). While I cannot see that during debugging, some phones seem to try SSL instead of plain http.
I am still digging in the code. But if anyone has an idea, please let me know.
Best
Ulf
blanke
June 20, 2016, 7:45pm
2
Every 15 minutes, we observe this (4 calls, one per second) coming from the couchbase library. Any explanations?
94.230.155.113 [20/Jun/2016:19:42:07 +0000] "\x16\x03\x01\x00\xD6\x01\x00\x00\xD2\x03\x01WhG\x16-b\x8E\x81~|RU\x0E\xA8\xC4\x891p\xE7Y\xC1(\xEC\xE2PLHt~\xCAj\xF5\x00\x00F\x00\x04\x00\x05\x00/\x005\xC0\x02\xC0\x04\xC0\x05\xC0\x0C\xC0\x0E\xC0\x0F\xC0\x07\xC0\x09\xC0" 400 181 "-" "-" "-" "-" "http" "-" 194.230.155.113 [20/Jun/2016:19:42:08 +0000] "\x16\x03\x00\x00q\x01\x00\x00m\x03\x00WhG\x17\xF5\xBE\x0C\x04\xBB\x9F\x13\x80\xFE\x14\xEBb\x87 \x8C\x03\xB4\xFE2\xA7\x9B*2
\xFD\xF0!Y\x00\x00F\x00\x04\x00\x05\x00/\x005\xC0\x02\xC0\x04\xC0\x05\xC0\x0C\xC0\x0E\xC0\x0F\xC0\x07\xC0\x09\xC0" 400 181 “-” “-” “-” “-” “http” "-"
194.230.155.113 [20/Jun/2016:19:42:09 +0000] "\x16\x03\x01\x00\xD6\x01\x00\x00\xD2\x03\x01WhG\x18\x90\xE4S\x1E\x12\xA7]\x9E8\xFD\x1B\xED-\xF6;\xC5$\xAF[@\x14[\x85\x14=G\x90\x00\x00F\x00\x04\x00\x05\x00/\x005\xC0\x02\xC0\x04\xC0\x05\xC0\x0C\xC0\x0E\xC0\x0F\xC0\x07\xC0\x09\xC0" 400 181 "-" "-" "-" "-" "http" "-" 194.230.155.113 [20/Jun/2016:19:42:10 +0000] "\x16\x03\x00\x00q\x01\x00\x00m\x03\x00WhG\x19\xDB{\xA0\xDCpj\xCC}1&\x80\xEE\x82t\xD4\xB6$\xD1+\xCC\xA7?\x1FK\xDE\xA2p\x9F\x00\x00F\x00\x04\x00\x05\x00/\x005\xC0\x02\xC0\x04\xC0\x05\xC0\x0C\xC0\x0E\xC0\x0F\xC0\x07\xC0\x09\xC0" 400 181 "-" "-" "-" "-" "http" "-"
(We keep the app alive in the background.)
blanke
June 20, 2016, 10:00pm
3
[CLOSED]
an unrelated service conflicted on our choosen port.