06-07-2023 12:41 AM
Hello ,
We are getting below logs during this time, CPU spike getting high more than 90%. This IP is 192.168.10.5 security scanner to scan device to check the vulnerabilities. I just wanted to know why this getting terminating but this security scanner able to scan thru ssh after sometimes.
Jun 3 14:06:54 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:14:01 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:29:28 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:33:07 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:50:15 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:53:31 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:54:25 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:55:17 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:57:00 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:57:42 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:57:51 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:59:01 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 14:59:13 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 15:09:31 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 15:10:10 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
Jun 3 15:11:53 MST: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.10.5
06-07-2023 03:13 AM
- Anyone can launch an SSH connection to a switch IP , if you want to restrict to authorized addresses then use an ACL on the vty's,
M.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide