The router is logging SSH and IPSec errors to an external syslog server. Over the past 24 hours there have been multiple instances logged of unexpected SSH message types terminating connections from the same IP, as well as IPSec packets being received with invalid SPI values. Logging is configured and messages are being sent via UDP to an external server through interface GigabitEthernet0/0.
The router is logging SSH and IPSec errors to an external syslog server. Over the past 24 hours there have been multiple instances logged of unexpected SSH message types terminating connections from the same IP, as well as IPSec packets being received with invalid SPI values. Logging is configured and messages are being sent via UDP to an external server through interface GigabitEthernet0/0.
The router is logging SSH and IPSec errors to an external syslog server. Over the past 24 hours there have been multiple instances logged of unexpected SSH message types terminating connections from the same IP, as well as IPSec packets being received with invalid SPI values. Logging is configured and messages are being sent via UDP to an external server through interface GigabitEthernet0/0.
006423: *Dec 16 08:01:29.889 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006424: *Dec 16 08:04:37.205 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006425: *Dec 16 08:05:33.369 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006426: *Dec 16 08:06:12.129 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006427: *Dec 16 08:09:21.417 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006428: *Dec 16 08:09:35.469 UTC: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPS EC packet has invalid spi for destaddr=84.41.109.230, prot=50, spi=0x18ABCA19(41 3911577), srcaddr=85.92.228.186, input interface=GigabitEthernet0/1 006429: *Dec 16 08:10:01.581 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006430: *Dec 16 08:12:15.049 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006431: *Dec 16 08:15:21.069 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006432: *Dec 16 08:19:52.417 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006433: *Dec 16 08:26:47.925 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006434: *Dec 16 08:29:02.097 UTC: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPS EC packet has invalid spi for destaddr=84.41.109.230, prot=50, spi=0xE54C0D05(38 46966533), srcaddr=31.176.144.95, input interface=GigabitEthernet0/1 006435: *Dec 16 08:31:07.553 UTC: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPS EC packet has invalid spi for destaddr=84.41.109.230, prot=50, spi=0xE6AF97AA(38 70267306), srcaddr=80.65.84.111, input interface=GigabitEthernet0/1 006436: *Dec 16 08:32:13.817 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 006437: *Dec 16 08:32:54.777 UTC: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 116.31.116.30 ZZO_ZeDo#