cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
241
Views
2
Helpful
1
Replies

cisco switch ||Unexpected message type has arrived

Hello ,

We are getting below logs during this time, CPU spike getting high more than 90%. This IP is 192.168.10.5 security scanner to scan device to check the vulnerabilities. I just wanted to know why this getting terminating but this security scanner able to scan thru ssh after sometimes. 

Jun 3 14:06:54 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:14:01 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:29:28 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:33:07 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:50:15 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:53:31 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:54:25 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:55:17 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:57:00 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:57:42 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:57:51 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:59:01 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:59:13 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 15:09:31 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 15:10:10 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 15:11:53 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5

1 Reply 1

marce1000
VIP
VIP

 

 - Anyone can launch an SSH connection to a switch IP  , if you want to restrict to authorized addresses then use an ACL on the vty's,

 M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !
Review Cisco Networking products for a $25 gift card