RT-AC87U-Log file is getting bombarded with Successful Dropbear messages

[GeneM]

Greetings.

My log file is getting bombarded with successful Dropbear messages, everytime Home Assistant is checking on things (ssh is only open to LAN.) I'd like to say this started with 384.13_1, but I can't be 100% certain.

Is there anything I can do to reduce this logging level? Or, eliminate it?

Thanks, Gene

Aug 17 17:10:19 dropbear[1670]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40212
Aug 17 17:11:19 dropbear[1683]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40308
Aug 17 17:11:20 dropbear[1686]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40312
Aug 17 17:12:20 dropbear[1706]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40418
Aug 17 17:12:21 dropbear[1711]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40420
Aug 17 17:13:21 dropbear[1721]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40514
Aug 17 17:13:22 dropbear[1724]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40516
Aug 17 17:14:22 dropbear[1744]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40620
Aug 17 17:14:23 dropbear[1749]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40622
Aug 17 17:14:35 dropbear[1756]: Pubkey auth succeeded for 'hauser' with key sha1!! ad:80...  from 192.168.0.4:40642

 

[ColinTaylor]

It looks like the piece of code that generates that message hasn't been altered for years, so I don't know why it would be any different now.

AFAICT the message is sent with a log level of Notice, so if you change the "Syslog log level" to "Warning" it ought to hide those messages.

 

[GeneM]

OMG, apologies. I didn't even see those fields above the log.

That did it.
Thanks for the follow-up.

 

[sfx2000]

My log file is getting bombarded with successful Dropbear messages

If you don't need SSH access - and most don't - disable it and be more secure...