Attempt by … to open a stream on first hop of circuit. Closing.
dgoulet says in #24011 (moved): An 0.2.9.15 relay just triggered this on my 0.3.3.6 relay:
Jun 03 17:17:16.642 [warn] Attempt by 18.104.22.168:48914 to open a stream on first hop of circuit. Closing.
The IP address there is a public relay here: https://metrics.torproject.org/rs.html#details/65663E6D2E761B0650AC8A3F74F1243209D562DE