09-10-2015 04:48 AM - edited 03-08-2019 01:43 AM
Hi,
Based on the following logs what does it mean?
*Aug 26 04:47:27.874: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 85.105.19.171
*Aug 26 06:11:50.077: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 182.100.67.113
*Aug 26 07:32:50.037: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 222.186.21.218
*Aug 26 10:35:49.212: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 222.186.56.175
*Aug 26 13:19:24.168: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 222.186.21.236
*Aug 27 00:53:38.461: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 43.229.53.26
*Aug 27 11:36:22.258: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 150.242.110.5
thanks
09-10-2015 10:04 AM
this message means that SSH connection was closed by remote end because it is not interested to continue, like in case with ssh-keyscan, or it doesn't want to continue, like in case with changed RSA keys.
HTH
09-10-2015 07:19 PM
is this a sign of attack to our network?
thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide