Suspicious Event in general log

[col3]

Hello,

I am wondering if someone can tell me what this error means; I think it is something to do with someone trying to gain access to my system.  I see the message repeatedly; and when I say repeatedly I mean 30 or so an hour.  It is there when no one has been logged in to the GUI.  Also, when I had SSH enabled I was able to see multiple attempts to break in by brute force; so I disabled SSH regardless of having a very strong PW.  I have seen talk of this error, or similar errors in different context throughout the web on other forums, and none of the scenarios fit mine.

Thanks in advance for any input.

lighttpd[13931]: (connections.c.305) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

[KOM]

Anything attached to the Internet is attacked/scanned/probed/enumerated/logged hundreds of times per day, every day.  That's normal.  The error you're seeing is to do with the pfSense WebGUI which is served using Lighttpd.  One thing that seems to trigger this error is when you have WebGUI running in HTTPS mode, but you access it via HTTP with port 443 specified.  Are you doing that?

http://pfsense_LAN_IP:443/