What's new

RT-AC87U-Log file is getting bombarded with Successful Dropbear messages

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

GeneM

Occasional Visitor
Greetings.

My log file is getting bombarded with successful Dropbear messages, everytime Home Assistant is checking on things (ssh is only open to LAN.) I'd like to say this started with 384.13_1, but I can't be 100% certain.

Is there anything I can do to reduce this logging level? Or, eliminate it?

Thanks, Gene


Code:
Aug 17 17:10:19 dropbear[1670]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40212
Aug 17 17:11:19 dropbear[1683]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40308
Aug 17 17:11:20 dropbear[1686]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40312
Aug 17 17:12:20 dropbear[1706]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40418
Aug 17 17:12:21 dropbear[1711]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40420
Aug 17 17:13:21 dropbear[1721]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40514
Aug 17 17:13:22 dropbear[1724]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40516
Aug 17 17:14:22 dropbear[1744]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40620
Aug 17 17:14:23 dropbear[1749]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40622
Aug 17 17:14:35 dropbear[1756]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40642
 
It looks like the piece of code that generates that message hasn't been altered for years, so I don't know why it would be any different now. :confused:

AFAICT the message is sent with a log level of Notice, so if you change the "Syslog log level" to "Warning" it ought to hide those messages.
 
OMG, apologies. I didn't even see those fields above the log. o_O

That did it.
Thanks for the follow-up.
 

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top