Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member


Ok, I need a little help with this logging that i found on our production router.

This is the message I am starting to get in my logging for the router 

Another FIN in CLOSEWAIT state.
 %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from

I have read that i need to change my RSA key and to change my acl lines for this router. 

Also read that someone is doing ssh scan on public ip address and trying to do a brute force attack. 

Since I did not setup this router, I don't know if this setup is good or bad. 

Here is the information I can provide to help with this issue.

  IOS XE Version: 03.08.01.S

  ip access-list extended
 permit icmp any any log
 permit ip any any log
ip access-list extended


Any help would be appreciate or any ideas on how to fixed this problem ?

Also let me know how serious this message. 

Everyone's tags (1)