Resolved! restrict VTY access on switch
I have a switch outside our firewall open to the Internet. It is a newer 3650 switch. I have an ACL assigned to the vty interface that should restrict management traffic to it. I found it went into quiet mode because someone was doing a dictionary...