cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
11170
Views
5
Helpful
1
Replies

Block %RCMD-4-RSHPORTATTEMPT:Attempted to connect to RSHELL from x.x.x.x

skiran
Level 1
Level 1

Hi,

Seeing the following error continously on one of the routers.

%RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from x.x.x.x

Could some one suggest how to block this.

Thanks in advance.

Shashi.

1 Reply 1

pavel.vasiliev
Level 1
Level 1

This message just alerting you that someone from ip x.x.x.x trying to connecting to your device via rshell.

You can create ACL with

...

deny tcp any eq 514

...

statement.

In case of PC with x.x.x.x address is in your network you can try to find out any software that attempts to get any information from your router. May be it is forgotten server (statistics, monitoring...)?