Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Does this output mean there are attemots to hack my router?

*Jan 9 11:45:51.719: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 168.68.55.24

*Jan 9 11:45:52.319: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 94.116.51.228

*Jan 9 11:45:52.695: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 184.81.54.98

*Jan 9 11:45:53.295: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 122.78.150.102

*Jan 9 11:45:53.703: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 102.127.19.97

*Jan 9 11:45:54.303: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 199.146.237.178

*Jan 9 11:45:54.311: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 125.98.205.51

*Jan 9 11:45:54.911: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 116.9.144.61

*Jan 9 11:45:54.991: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 125.98.205.51

*Jan 9 11:45:55.567: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 55.52.54.160

*Jan 9 11:45:55.591: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 116.9.144.61

*Jan 9 11:46:49.651: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 215.30.105.148

*Jan 9 11:46:50.255: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 144.193.65.87

*Jan 9 11:46:51.231: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 173.227.24.119

*Jan 9 11:46:51.331: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 107.241.203.226

*Jan 9 11:46:51.531: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 107.241.203.226

*Jan 9 11:46:51.635: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 173.227.24.119

*Jan 9 11:46:51.771: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 107.241.203.226

*Jan 9 11:46:51.931: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 176.140.26.146

*Jan 9 11:46:51.995: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 107.241.203.226

*Jan 9 11:46:52.135: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 176.140.26.146

*Jan 9 11:46:52.231: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 192.87.153.23

*Jan 9 11:46:52.371: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 176.140.26.146

*Jan 9 11:46:52.435: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 192.87.153.23

*Jan 9 11:46:52.595: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 176.140.26.146

*Jan 9 11:46:52.639: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 192.87.153.23

*Jan 9 11:46:52.835: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 192.87.153.23

*Jan 9 11:46:53.035: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 192.87.153.23

*Jan 9 11:46:53.435: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 30.151.215.130

*Jan 9 11:46:53.699: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 30.151.215.130

*Jan 9 11:46:54.007: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 30.151.215.130

*Jan 9 11:46:54.035: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 206.123.186.41

*Jan 9 11:46:54.255: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 30.151.215.130

*Jan 9 11:46:54.295: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 206.123.186.41

*Jan 9 11:46:54.455: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 220.175.237.247

*Jan 9 11:46:54.595: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 206.123.186.41

*Jan 9 11:46:54.775: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 220.175.237.247

*Jan 9 11:46:54.855: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 206.123.186.41

*Jan 9 11:46:54.955: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 220.175.237.247

*Jan 9 11:46:55.055: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 138.12.94.163

*Jan 9 11:46:55.375: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 138.12.94.163

*Jan 9 11:46:55.555: %RCMD-4-RSHPORTATTEMPT: Attempted to connect to RSHELL from 138.12.94.163

Thanks

Randall

1 REPLY
Purple

Re: Does this output mean there are attemots to hack my router?

Certainly appear to be something going on seeing that it is coming from so many different addresses , either that or you have a lot of people on your network scanning your network via snmp or something like that , we see similar messages when Ciscoworks attempts to do things on the router but it is limited to the Ciscoworks address only . Are all these addresses on your network ?

300
Views
0
Helpful
1
Replies
CreatePlease login to create content