openwrt一直有来自于自身的ssh登录请求，如果被打的话不应该是外网ip吗？

十三只兔子

怎么登录失败的信息全是来自于自己(192.168.6.1)？这种要如何排查？
Fri Jun  6 20:36:28 2025 authpriv.info dropbear[22696]: Exit before auth from <192.168.6.1:59064>: Exited normally
Fri Jun  6 20:36:55 2025 authpriv.info dropbear[22698]: Child connection from 192.168.6.1:51660
Fri Jun  6 20:36:58 2025 authpriv.warn dropbear[22698]: Bad password attempt for 'root' from 192.168.6.1:51660
Fri Jun  6 20:36:58 2025 authpriv.info dropbear[22698]: Exit before auth from <192.168.6.1:51660>: (user 'root', 1 fails): Exited normally
Fri Jun  6 20:37:34 2025 authpriv.info dropbear[23174]: Child connection from 192.168.6.1:53370
Fri Jun  6 20:37:38 2025 authpriv.warn dropbear[23174]: Login attempt for nonexistent user
Fri Jun  6 20:37:39 2025 authpriv.info dropbear[23174]: Exit before auth from <192.168.6.1:53370>: Exited normally
Fri Jun  6 20:37:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 20:38:12 2025 authpriv.info dropbear[23648]: Child connection from 192.168.6.1:55988
Fri Jun  6 20:38:15 2025 authpriv.warn dropbear[23648]: Bad password attempt for 'root' from 192.168.6.1:55988
Fri Jun  6 20:38:16 2025 authpriv.info dropbear[23648]: Exit before auth from <192.168.6.1:55988>: (user 'root', 1 fails): Exited normally
Fri Jun  6 20:38:53 2025 authpriv.info dropbear[23655]: Child connection from 192.168.6.1:37684
Fri Jun  6 20:38:55 2025 authpriv.warn dropbear[23655]: Login attempt for nonexistent user
Fri Jun  6 20:38:56 2025 authpriv.info dropbear[23655]: Exit before auth from <192.168.6.1:37684>: Exited normally
Fri Jun  6 20:39:31 2025 authpriv.info dropbear[24724]: Child connection from 192.168.6.1:36468
Fri Jun  6 20:39:34 2025 authpriv.warn dropbear[24724]: Login attempt for nonexistent user
Fri Jun  6 20:39:35 2025 authpriv.info dropbear[24724]: Exit before auth from <192.168.6.1:36468>: Exited normally
Fri Jun  6 20:40:14 2025 authpriv.info dropbear[25198]: Child connection from 192.168.6.1:52668
Fri Jun  6 20:40:16 2025 authpriv.warn dropbear[25198]: Login attempt for nonexistent user
Fri Jun  6 20:40:17 2025 authpriv.info dropbear[25198]: Exit before auth from <192.168.6.1:52668>: Exited normally
Fri Jun  6 20:40:49 2025 authpriv.info dropbear[25200]: Child connection from 192.168.6.1:47462
Fri Jun  6 20:40:52 2025 authpriv.warn dropbear[25200]: Login attempt for nonexistent user
Fri Jun  6 20:40:54 2025 authpriv.info dropbear[25200]: Exit before auth from <192.168.6.1:47462>: Exited normally
Fri Jun  6 20:41:27 2025 authpriv.info dropbear[25682]: Child connection from 192.168.6.1:56770
Fri Jun  6 20:41:29 2025 authpriv.warn dropbear[25682]: Login attempt for nonexistent user
Fri Jun  6 20:41:29 2025 authpriv.info dropbear[25682]: Exit before auth from <192.168.6.1:56770>: Exited normally
Fri Jun  6 20:42:04 2025 authpriv.info dropbear[25685]: Child connection from 192.168.6.1:43156
Fri Jun  6 20:42:05 2025 authpriv.warn dropbear[25685]: Login attempt for nonexistent user
Fri Jun  6 20:42:06 2025 authpriv.info dropbear[25685]: Exit before auth from <192.168.6.1:43156>: Exited normally
Fri Jun  6 20:42:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 20:42:44 2025 authpriv.info dropbear[26159]: Child connection from 192.168.6.1:60976
Fri Jun  6 20:42:45 2025 authpriv.warn dropbear[26159]: Login attempt for nonexistent user
Fri Jun  6 20:42:46 2025 authpriv.info dropbear[26159]: Exit before auth from <192.168.6.1:60976>: Exited normally
Fri Jun  6 20:43:21 2025 authpriv.info dropbear[26634]: Child connection from 192.168.6.1:58428
Fri Jun  6 20:43:22 2025 authpriv.warn dropbear[26634]: Login attempt for nonexistent user
Fri Jun  6 20:43:23 2025 authpriv.info dropbear[26634]: Exit before auth from <192.168.6.1:58428>: Exited normally
Fri Jun  6 20:44:02 2025 authpriv.info dropbear[26643]: Child connection from 192.168.6.1:53376
Fri Jun  6 20:44:04 2025 authpriv.warn dropbear[26643]: Login attempt for nonexistent user
Fri Jun  6 20:44:05 2025 authpriv.info dropbear[26643]: Exit before auth from <192.168.6.1:53376>: Exited normally
Fri Jun  6 20:44:40 2025 authpriv.info dropbear[27118]: Child connection from 192.168.6.1:46786
Fri Jun  6 20:44:41 2025 authpriv.warn dropbear[27118]: Login attempt for nonexistent user
Fri Jun  6 20:44:43 2025 authpriv.info dropbear[27118]: Exit before auth from <192.168.6.1:46786>: Exited normally
Fri Jun  6 20:45:19 2025 authpriv.info dropbear[27592]: Child connection from 192.168.6.1:57184
Fri Jun  6 20:45:20 2025 authpriv.warn dropbear[27592]: Login attempt for nonexistent user
Fri Jun  6 20:45:21 2025 authpriv.info dropbear[27592]: Exit before auth from <192.168.6.1:57184>: Exited normally
Fri Jun  6 20:45:57 2025 authpriv.info dropbear[27594]: Child connection from 192.168.6.1:41042
Fri Jun  6 20:45:59 2025 authpriv.warn dropbear[27594]: Login attempt for nonexistent user
Fri Jun  6 20:46:01 2025 authpriv.info dropbear[27594]: Exit before auth from <192.168.6.1:41042>: Exited normally
Fri Jun  6 20:46:34 2025 authpriv.info dropbear[28068]: Child connection from 192.168.6.1:49134
Fri Jun  6 20:46:36 2025 authpriv.warn dropbear[28068]: Login attempt for nonexistent user
Fri Jun  6 20:46:37 2025 authpriv.info dropbear[28068]: Exit before auth from <192.168.6.1:49134>: Exited normally
Fri Jun  6 20:47:11 2025 authpriv.info dropbear[28070]: Child connection from 192.168.6.1:39816
Fri Jun  6 20:47:12 2025 authpriv.warn dropbear[28070]: Login attempt for nonexistent user
Fri Jun  6 20:47:13 2025 authpriv.info dropbear[28070]: Exit before auth from <192.168.6.1:39816>: Exited normally
Fri Jun  6 20:47:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 20:47:50 2025 authpriv.info dropbear[28544]: Child connection from 192.168.6.1:53728
Fri Jun  6 20:47:51 2025 authpriv.warn dropbear[28544]: Login attempt for nonexistent user
Fri Jun  6 20:47:52 2025 authpriv.info dropbear[28544]: Exit before auth from <192.168.6.1:53728>: Exited normally
Fri Jun  6 20:48:29 2025 authpriv.info dropbear[29019]: Child connection from 192.168.6.1:58794
Fri Jun  6 20:48:30 2025 authpriv.warn dropbear[29019]: Login attempt for nonexistent user
Fri Jun  6 20:48:31 2025 authpriv.info dropbear[29019]: Exit before auth from <192.168.6.1:58794>: Exited normally
Fri Jun  6 20:49:11 2025 authpriv.info dropbear[29616]: Child connection from 192.168.6.1:53906
Fri Jun  6 20:49:12 2025 authpriv.warn dropbear[29616]: Login attempt for nonexistent user
Fri Jun  6 20:49:13 2025 authpriv.info dropbear[29616]: Exit before auth from <192.168.6.1:53906>: Exited normally
Fri Jun  6 20:49:51 2025 authpriv.info dropbear[30090]: Child connection from 192.168.6.1:53696
Fri Jun  6 20:49:54 2025 authpriv.warn dropbear[30090]: Login attempt for nonexistent user
Fri Jun  6 20:49:54 2025 authpriv.info dropbear[30090]: Exit before auth from <192.168.6.1:53696>: Exited normally
Fri Jun  6 20:50:27 2025 authpriv.info dropbear[30564]: Child connection from 192.168.6.1:53170
Fri Jun  6 20:50:28 2025 authpriv.warn dropbear[30564]: Login attempt for nonexistent user
Fri Jun  6 20:50:29 2025 authpriv.info dropbear[30564]: Exit before auth from <192.168.6.1:53170>: Exited normally
Fri Jun  6 20:51:02 2025 authpriv.info dropbear[30566]: Child connection from 192.168.6.1:40520
Fri Jun  6 20:51:03 2025 authpriv.warn dropbear[30566]: Login attempt for nonexistent user
Fri Jun  6 20:51:04 2025 authpriv.info dropbear[30566]: Exit before auth from <192.168.6.1:40520>: Exited normally
Fri Jun  6 20:51:38 2025 authpriv.info dropbear[31044]: Child connection from 192.168.6.1:51742
Fri Jun  6 20:51:40 2025 authpriv.warn dropbear[31044]: Login attempt for nonexistent user
Fri Jun  6 20:51:41 2025 authpriv.info dropbear[31044]: Exit before auth from <192.168.6.1:51742>: Exited normally
Fri Jun  6 20:52:14 2025 authpriv.info dropbear[31046]: Child connection from 192.168.6.1:41522
Fri Jun  6 20:52:16 2025 authpriv.warn dropbear[31046]: Login attempt for nonexistent user
Fri Jun  6 20:52:16 2025 authpriv.info dropbear[31046]: Exit before auth from <192.168.6.1:41522>: Exited normally
Fri Jun  6 20:52:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 20:52:50 2025 authpriv.info dropbear[31523]: Child connection from 192.168.6.1:45012
Fri Jun  6 20:52:51 2025 authpriv.warn dropbear[31523]: Login attempt for nonexistent user
Fri Jun  6 20:52:51 2025 authpriv.info dropbear[31523]: Exit before auth from <192.168.6.1:45012>: Exited normally
Fri Jun  6 20:53:26 2025 authpriv.info dropbear[31998]: Child connection from 192.168.6.1:43304
Fri Jun  6 20:53:27 2025 authpriv.warn dropbear[31998]: Login attempt for nonexistent user
Fri Jun  6 20:53:28 2025 authpriv.info dropbear[31998]: Exit before auth from <192.168.6.1:43304>: Exited normally
Fri Jun  6 20:54:02 2025 authpriv.info dropbear[32000]: Child connection from 192.168.6.1:47404
Fri Jun  6 20:54:03 2025 authpriv.warn dropbear[32000]: Login attempt for nonexistent user
Fri Jun  6 20:54:04 2025 authpriv.info dropbear[32000]: Exit before auth from <192.168.6.1:47404>: Exited normally
Fri Jun  6 20:54:39 2025 authpriv.info dropbear[32487]: Child connection from 192.168.6.1:55878
Fri Jun  6 20:54:41 2025 authpriv.warn dropbear[32487]: Bad password attempt for 'root' from 192.168.6.1:55878
Fri Jun  6 20:54:42 2025 authpriv.info dropbear[32487]: Exit before auth from <192.168.6.1:55878>: (user 'root', 1 fails): Exited normally
Fri Jun  6 20:55:16 2025 authpriv.info dropbear[32489]: Child connection from 192.168.6.1:59158
Fri Jun  6 20:55:17 2025 authpriv.warn dropbear[32489]: Login attempt for nonexistent user
Fri Jun  6 20:55:18 2025 authpriv.info dropbear[32489]: Exit before auth from <192.168.6.1:59158>: Exited normally
Fri Jun  6 20:55:56 2025 authpriv.info dropbear[498]: Child connection from 192.168.6.1:53552
Fri Jun  6 20:55:57 2025 authpriv.warn dropbear[498]: Bad password attempt for 'root' from 192.168.6.1:53552
Fri Jun  6 20:55:58 2025 authpriv.info dropbear[498]: Exit before auth from <192.168.6.1:53552>: (user 'root', 1 fails): Exited normally
Fri Jun  6 20:56:36 2025 authpriv.info dropbear[991]: Child connection from 192.168.6.1:45974
Fri Jun  6 20:56:37 2025 authpriv.warn dropbear[991]: Login attempt for nonexistent user
Fri Jun  6 20:56:38 2025 authpriv.info dropbear[991]: Exit before auth from <192.168.6.1:45974>: Exited normally
Fri Jun  6 20:57:15 2025 authpriv.info dropbear[993]: Child connection from 192.168.6.1:44864
Fri Jun  6 20:57:16 2025 authpriv.warn dropbear[993]: Login attempt for nonexistent user
Fri Jun  6 20:57:17 2025 authpriv.info dropbear[993]: Exit before auth from <192.168.6.1:44864>: Exited normally
Fri Jun  6 20:57:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 20:57:54 2025 authpriv.info dropbear[1479]: Child connection from 192.168.6.1:46230
Fri Jun  6 20:57:55 2025 authpriv.warn dropbear[1479]: Login attempt for nonexistent user
Fri Jun  6 20:57:57 2025 authpriv.info dropbear[1479]: Exit before auth from <192.168.6.1:46230>: Exited normally
Fri Jun  6 20:58:32 2025 authpriv.info dropbear[1955]: Child connection from 192.168.6.1:52462
Fri Jun  6 20:58:47 2025 authpriv.warn dropbear[1955]: Login attempt for nonexistent user
Fri Jun  6 20:58:48 2025 authpriv.info dropbear[1955]: Exit before auth from <192.168.6.1:52462>: Exited normally
Fri Jun  6 20:59:10 2025 authpriv.info dropbear[2562]: Child connection from 192.168.6.1:40282
Fri Jun  6 20:59:11 2025 authpriv.warn dropbear[2562]: Login attempt for nonexistent user
Fri Jun  6 20:59:13 2025 authpriv.info dropbear[2562]: Exit before auth from <192.168.6.1:40282>: Exited normally
Fri Jun  6 20:59:47 2025 authpriv.info dropbear[3040]: Child connection from 192.168.6.1:51548
Fri Jun  6 20:59:49 2025 authpriv.warn dropbear[3040]: Bad password attempt for 'root' from 192.168.6.1:51548
Fri Jun  6 20:59:49 2025 authpriv.info dropbear[3040]: Exit before auth from <192.168.6.1:51548>: (user 'root', 1 fails): Exited normally
Fri Jun  6 21:00:25 2025 authpriv.info dropbear[3042]: Child connection from 192.168.6.1:51362
Fri Jun  6 21:00:28 2025 authpriv.warn dropbear[3042]: Login attempt for nonexistent user
Fri Jun  6 21:00:29 2025 authpriv.info dropbear[3042]: Exit before auth from <192.168.6.1:51362>: Exited normally
Fri Jun  6 21:01:04 2025 authpriv.info dropbear[3516]: Child connection from 192.168.6.1:33920
Fri Jun  6 21:01:08 2025 authpriv.warn dropbear[3516]: Login attempt for nonexistent user
Fri Jun  6 21:01:09 2025 authpriv.info dropbear[3516]: Exit before auth from <192.168.6.1:33920>: Exited normally
Fri Jun  6 21:01:43 2025 authpriv.info dropbear[3993]: Child connection from 192.168.6.1:37938
Fri Jun  6 21:01:45 2025 authpriv.warn dropbear[3993]: Login attempt for nonexistent user
Fri Jun  6 21:01:46 2025 authpriv.info dropbear[3993]: Exit before auth from <192.168.6.1:37938>: Exited normally
Fri Jun  6 21:02:22 2025 authpriv.info dropbear[3995]: Child connection from 192.168.6.1:49746
Fri Jun  6 21:02:24 2025 authpriv.warn dropbear[3995]: Login attempt for nonexistent user
Fri Jun  6 21:02:25 2025 authpriv.info dropbear[3995]: Exit before auth from <192.168.6.1:49746>: Exited normally
Fri Jun  6 21:02:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 21:03:03 2025 authpriv.info dropbear[4475]: Child connection from 192.168.6.1:59338
Fri Jun  6 21:03:04 2025 authpriv.warn dropbear[4475]: Login attempt for nonexistent user
Fri Jun  6 21:03:05 2025 authpriv.info dropbear[4475]: Exit before auth from <192.168.6.1:59338>: Exited normally
Fri Jun  6 21:03:44 2025 authpriv.info dropbear[4950]: Child connection from 192.168.6.1:49828
Fri Jun  6 21:03:46 2025 authpriv.warn dropbear[4950]: Login attempt for nonexistent user
Fri Jun  6 21:03:47 2025 authpriv.info dropbear[4950]: Exit before auth from <192.168.6.1:49828>: Exited normally
Fri Jun  6 21:04:20 2025 authpriv.info dropbear[4952]: Child connection from 192.168.6.1:35400
Fri Jun  6 21:04:21 2025 authpriv.warn dropbear[4952]: Login attempt for nonexistent user
Fri Jun  6 21:04:23 2025 authpriv.info dropbear[4952]: Exit before auth from <192.168.6.1:35400>: Exited normally
Fri Jun  6 21:04:57 2025 authpriv.info dropbear[5427]: Child connection from 192.168.6.1:55154
Fri Jun  6 21:04:58 2025 authpriv.warn dropbear[5427]: Login attempt for nonexistent user
Fri Jun  6 21:04:59 2025 authpriv.info dropbear[5427]: Exit before auth from <192.168.6.1:55154>: Exited normally
Fri Jun  6 21:05:35 2025 authpriv.info dropbear[5909]: Child connection from 192.168.6.1:58432
Fri Jun  6 21:05:36 2025 authpriv.warn dropbear[5909]: Login attempt for nonexistent user
Fri Jun  6 21:05:37 2025 authpriv.info dropbear[5909]: Exit before auth from <192.168.6.1:58432>: Exited normally
Fri Jun  6 21:06:14 2025 authpriv.info dropbear[5911]: Child connection from 192.168.6.1:54782
Fri Jun  6 21:06:15 2025 authpriv.warn dropbear[5911]: Login attempt for nonexistent user
Fri Jun  6 21:06:16 2025 authpriv.info dropbear[5911]: Exit before auth from <192.168.6.1:54782>: Exited normally
Fri Jun  6 21:06:54 2025 authpriv.info dropbear[6385]: Child connection from 192.168.6.1:41144
Fri Jun  6 21:06:57 2025 authpriv.warn dropbear[6385]: Login attempt for nonexistent user
Fri Jun  6 21:06:57 2025 authpriv.info dropbear[6385]: Exit before auth from <192.168.6.1:41144>: Exited normally
Fri Jun  6 21:07:31 2025 authpriv.info dropbear[6461]: Child connection from 192.168.6.1:50466
Fri Jun  6 21:07:32 2025 authpriv.warn dropbear[6461]: Login attempt for nonexistent user
Fri Jun  6 21:07:34 2025 authpriv.info dropbear[6461]: Exit before auth from <192.168.6.1:50466>: Exited normally
Fri Jun  6 21:07:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 21:08:09 2025 authpriv.info dropbear[6862]: Child connection from 192.168.6.1:48938
Fri Jun  6 21:08:10 2025 authpriv.warn dropbear[6862]: Login attempt for nonexistent user
Fri Jun  6 21:08:11 2025 authpriv.info dropbear[6862]: Exit before auth from <192.168.6.1:48938>: Exited normally
Fri Jun  6 21:08:46 2025 authpriv.info dropbear[7336]: Child connection from 192.168.6.1:55092
Fri Jun  6 21:08:48 2025 authpriv.warn dropbear[7336]: Bad password attempt for 'root' from 192.168.6.1:55092
Fri Jun  6 21:08:49 2025 authpriv.info dropbear[7336]: Exit before auth from <192.168.6.1:55092>: (user 'root', 1 fails): Exited normally
Fri Jun  6 21:09:22 2025 authpriv.info dropbear[7962]: Child connection from 192.168.6.1:37390
Fri Jun  6 21:09:25 2025 authpriv.warn dropbear[7962]: Bad password attempt for 'root' from 192.168.6.1:37390
Fri Jun  6 21:09:25 2025 authpriv.info dropbear[7962]: Exit before auth from <192.168.6.1:37390>: (user 'root', 1 fails): Exited normally
Fri Jun  6 21:10:00 2025 authpriv.info dropbear[8437]: Child connection from 192.168.6.1:60588
Fri Jun  6 21:10:01 2025 authpriv.warn dropbear[8437]: Bad password attempt for 'root' from 192.168.6.1:60588
Fri Jun  6 21:10:02 2025 authpriv.info dropbear[8437]: Exit before auth from <192.168.6.1:60588>: (user 'root', 1 fails): Exited normally
Fri Jun  6 21:10:36 2025 authpriv.info dropbear[8911]: Child connection from 192.168.6.1:48418
Fri Jun  6 21:10:38 2025 authpriv.warn dropbear[8911]: Login attempt for nonexistent user
Fri Jun  6 21:10:39 2025 authpriv.info dropbear[8911]: Exit before auth from <192.168.6.1:48418>: Exited normally
Fri Jun  6 21:11:11 2025 authpriv.info dropbear[8913]: Child connection from 192.168.6.1:39896
Fri Jun  6 21:11:12 2025 authpriv.warn dropbear[8913]: Login attempt for nonexistent user
Fri Jun  6 21:11:12 2025 authpriv.info dropbear[8913]: Exit before auth from <192.168.6.1:39896>: Exited normally
Fri Jun  6 21:11:48 2025 authpriv.info dropbear[9387]: Child connection from 192.168.6.1:44148
Fri Jun  6 21:11:51 2025 authpriv.warn dropbear[9387]: Bad password attempt for 'root' from 192.168.6.1:44148
Fri Jun  6 21:11:51 2025 authpriv.info dropbear[9387]: Exit before auth from <192.168.6.1:44148>: (user 'root', 1 fails): Exited normally
Fri Jun  6 21:12:26 2025 authpriv.info dropbear[9389]: Child connection from 192.168.6.1:39880
Fri Jun  6 21:12:28 2025 authpriv.warn dropbear[9389]: Login attempt for nonexistent user
Fri Jun  6 21:12:29 2025 authpriv.info dropbear[9389]: Exit before auth from <192.168.6.1:39880>: Exited normally
Fri Jun  6 21:12:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 21:13:04 2025 authpriv.info dropbear[9865]: Child connection from 192.168.6.1:58120
Fri Jun  6 21:13:05 2025 authpriv.warn dropbear[9865]: Login attempt for nonexistent user
Fri Jun  6 21:13:05 2025 authpriv.info dropbear[9865]: Exit before auth from <192.168.6.1:58120>: Exited normally
Fri Jun  6 21:13:42 2025 authpriv.info dropbear[10340]: Child connection from 192.168.6.1:43412
Fri Jun  6 21:13:43 2025 authpriv.warn dropbear[10340]: Login attempt for nonexistent user
Fri Jun  6 21:13:43 2025 authpriv.info dropbear[10340]: Exit before auth from <192.168.6.1:43412>: Exited normally
Fri Jun  6 21:14:21 2025 authpriv.info dropbear[10342]: Child connection from 192.168.6.1:33134
Fri Jun  6 21:14:22 2025 authpriv.warn dropbear[10342]: Login attempt for nonexistent user
Fri Jun  6 21:14:23 2025 authpriv.info dropbear[10342]: Exit before auth from <192.168.6.1:33134>: Exited normally
Fri Jun  6 21:15:01 2025 authpriv.info dropbear[10816]: Child connection from 192.168.6.1:60240
Fri Jun  6 21:15:02 2025 authpriv.warn dropbear[10816]: Login attempt for nonexistent user
Fri Jun  6 21:15:02 2025 authpriv.info dropbear[10816]: Exit before auth from <192.168.6.1:60240>: Exited normally
Fri Jun  6 21:15:41 2025 authpriv.info dropbear[11290]: Child connection from 192.168.6.1:42870
Fri Jun  6 21:15:42 2025 authpriv.warn dropbear[11290]: Login attempt for nonexistent user
Fri Jun  6 21:15:43 2025 authpriv.info dropbear[11290]: Exit before auth from <192.168.6.1:42870>: Exited normally
Fri Jun  6 21:16:22 2025 authpriv.info dropbear[11292]: Child connection from 192.168.6.1:54586
Fri Jun  6 21:16:23 2025 authpriv.warn dropbear[11292]: Login attempt for nonexistent user
Fri Jun  6 21:16:24 2025 authpriv.info dropbear[11292]: Exit before auth from <192.168.6.1:54586>: Exited normally
Fri Jun  6 21:17:03 2025 authpriv.info dropbear[11773]: Child connection from 192.168.6.1:50562
Fri Jun  6 21:17:07 2025 authpriv.warn dropbear[11773]: User 'daemon' has invalid shell, rejected
Fri Jun  6 21:17:08 2025 authpriv.info dropbear[11773]: Exit before auth from <192.168.6.1:50562>: (user 'daemon', 1 fails): Exited normally
Fri Jun  6 21:17:41 2025 authpriv.info dropbear[12247]: Child connection from 192.168.6.1:55542
Fri Jun  6 21:17:42 2025 authpriv.warn dropbear[12247]: User 'daemon' has invalid shell, rejected
Fri Jun  6 21:17:43 2025 authpriv.info dropbear[12247]: Exit before auth from <192.168.6.1:55542>: (user 'daemon', 1 fails): Exited normally
Fri Jun  6 21:17:44 2025 daemon.warn miniupnpd[6727]: NAT-PMP packet sender 192.168.193.199:43497 not from a LAN, ignoring
Fri Jun  6 21:18:19 2025 authpriv.info dropbear[12249]: Child connection from 192.168.6.1:50602
Fri Jun  6 21:18:21 2025 authpriv.warn dropbear[12249]: User 'daemon' has invalid shell, rejected
Fri Jun  6 21:18:22 2025 authpriv.info dropbear[12249]: Exit before auth from <192.168.6.1:50602>: (user 'daemon', 1 fails): Exited normally
Fri Jun  6 21:18:53 2025 authpriv.info dropbear[12723]: Child connection from 192.168.6.1:45688
Fri Jun  6 21:18:54 2025 authpriv.warn dropbear[12723]: Login attempt for nonexistent user

十三只兔子

没人遇到过吗？

del617

应该是openwrt本身或安装的某个程序/脚本在本机循环尝试 SSH 登录

zad

监控本地地址，参考日志比对端口号，看是哪个进程发起的