1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

RT-AC87U-Log file is getting bombarded with Successful Dropbear messages

Discussion in 'Asuswrt-Merlin' started by GeneM, Aug 17, 2019.

  1. GeneM

    GeneM Occasional Visitor

    Joined:
    Feb 1, 2017
    Messages:
    21
    Greetings.

    My log file is getting bombarded with successful Dropbear messages, everytime Home Assistant is checking on things (ssh is only open to LAN.) I'd like to say this started with 384.13_1, but I can't be 100% certain.

    Is there anything I can do to reduce this logging level? Or, eliminate it?

    Thanks, Gene


    Code:
    Aug 17 17:10:19 dropbear[1670]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40212
    Aug 17 17:11:19 dropbear[1683]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40308
    Aug 17 17:11:20 dropbear[1686]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40312
    Aug 17 17:12:20 dropbear[1706]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40418
    Aug 17 17:12:21 dropbear[1711]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40420
    Aug 17 17:13:21 dropbear[1721]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40514
    Aug 17 17:13:22 dropbear[1724]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40516
    Aug 17 17:14:22 dropbear[1744]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40620
    Aug 17 17:14:23 dropbear[1749]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40622
    Aug 17 17:14:35 dropbear[1756]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40642
    
     
  2. ColinTaylor

    ColinTaylor Part of the Furniture

    Joined:
    Mar 31, 2014
    Messages:
    9,269
    Location:
    UK
    It looks like the piece of code that generates that message hasn't been altered for years, so I don't know why it would be any different now. :confused:

    AFAICT the message is sent with a log level of Notice, so if you change the "Syslog log level" to "Warning" it ought to hide those messages.
     
  3. GeneM

    GeneM Occasional Visitor

    Joined:
    Feb 1, 2017
    Messages:
    21
    OMG, apologies. I didn't even see those fields above the log. o_O

    That did it.
    Thanks for the follow-up.
     
  4. sfx2000

    sfx2000 Part of the Furniture

    Joined:
    Aug 11, 2011
    Messages:
    14,149
    Location:
    San Diego, CA
    If you don't need SSH access - and most don't - disable it and be more secure...