SSH ACCESS AUDIT
time=2026-07-06T13:18:50+00:00
host=router-ops

============================================================
SSH CONFIG HOST BLOCKS
============================================================

Host pve-mgts
    HostName 10.71.100.222
    User root
    IdentityFile ~/.ssh/router_ops_pve_mgts_ed25519
    IdentitiesOnly yes
    StrictHostKeyChecking accept-new

Host pve-mgts-old-ddn
    HostName 192.168.30.249
    User root
    IdentityFile ~/.ssh/router_ops_pve_mgts_ed25519
    IdentitiesOnly yes
    StrictHostKeyChecking accept-new

============================================================
PRIVATE KEY FILE CANDIDATES, PATHS AND FINGERPRINTS ONLY
============================================================
--- /home/ops/.ssh/router_ops_ed25519
-rw------- 1 ops ops 419 Jul  5 09:21 /home/ops/.ssh/router_ops_ed25519
256 SHA256:Ls2CG2r+L0P7rKPlrajMdYiHAe4tRc3UI9vUBf9vXVU vm130-router-ops-runner (ED25519)
--- /home/ops/.ssh/router_ops_pve_mgts_ed25519
-rw------- 1 ops ops 419 Jul  6 08:54 /home/ops/.ssh/router_ops_pve_mgts_ed25519
256 SHA256:VioyXWj0uRI3X1JCLxz/hqP9KgeYujWbl/84FotLrys router-ops-to-pve-mgts (ED25519)
--- /opt/router-ops/inventory/ssh-access-audit.sh
-rwxr-xr-x 1 ops ops 5046 Jul  6 13:18 /opt/router-ops/inventory/ssh-access-audit.sh
fingerprint_failed
--- /opt/router-ops/runs/20260705_094756_vm121/command.sh
-rw-r--r-- 1 root root 2017 Jul  5 10:35 /opt/router-ops/runs/20260705_094756_vm121/command.sh
fingerprint_failed
--- /opt/router-ops/runs/20260705_094857_vm121/command.sh
-rw-r--r-- 1 root root 1292 Jul  5 10:35 /opt/router-ops/runs/20260705_094857_vm121/command.sh
fingerprint_failed

============================================================
CURRENT ROUTES
============================================================
default via 192.168.30.1 dev eth0 proto dhcp src 192.168.30.84 metric 100 
10.71.100.0/24 dev router-ops-mgts scope link 
10.200.0.0/24 dev router-ops-mgts scope link 
10.201.0.0/24 dev router-ops-mgts scope link 
10.250.100.0/24 dev router-ops-mgts scope link 
192.168.30.0/24 dev eth0 proto kernel scope link src 192.168.30.84 metric 100 
192.168.30.1 dev eth0 proto dhcp scope link src 192.168.30.84 metric 100 

============================================================
REACHABILITY/AUTH TESTS
No keys are created. known_hosts is not modified.
Host key checking is bypassed only for this audit using UserKnownHostsFile=/dev/null.
============================================================

------------------------------------------------------------
Alias/native test
------------------------------------------------------------

--- pve-mgts via configured alias ---
SSH_OK
SSH_CONNECTION=10.250.100.4 43620 10.71.100.222 22
pve-wg-paid

------------------------------------------------------------
Per-key tests
------------------------------------------------------------

============================================================
home-vm100
human_command=ssh root@192.168.30.1
target=root@192.168.30.1
port=22
============================================================

--- home-vm100 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
SSH_OK
OpenWrt
SSH_CONNECTION=192.168.30.84 35132 192.168.30.1 22

--- home-vm100 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
root@192.168.30.1: Permission denied (publickey,password).

--- home-vm100 | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '/opt/router-ops/inventory/ssh-access-audit.sh' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/opt/router-ops/inventory/ssh-access-audit.sh": bad permissions
root@192.168.30.1: Permission denied (publickey,password).

--- home-vm100 | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094756_vm121/command.sh": error in libcrypto
root@192.168.30.1: Permission denied (publickey,password).

--- home-vm100 | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094857_vm121/command.sh": error in libcrypto
root@192.168.30.1: Permission denied (publickey,password).

============================================================
home-vm101
human_command=ssh root@192.168.30.2
target=root@192.168.30.2
port=22
============================================================

--- home-vm101 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
root@192.168.30.2: Permission denied (publickey,password).

--- home-vm101 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
root@192.168.30.2: Permission denied (publickey,password).

--- home-vm101 | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '/opt/router-ops/inventory/ssh-access-audit.sh' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/opt/router-ops/inventory/ssh-access-audit.sh": bad permissions
root@192.168.30.2: Permission denied (publickey,password).

--- home-vm101 | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094756_vm121/command.sh": error in libcrypto
root@192.168.30.2: Permission denied (publickey,password).

--- home-vm101 | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094857_vm121/command.sh": error in libcrypto
root@192.168.30.2: Permission denied (publickey,password).

============================================================
home-vm103
human_command=ssh root@192.168.30.189
target=root@192.168.30.189
port=22
============================================================

--- home-vm103 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive).

--- home-vm103 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive).

--- home-vm103 | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '/opt/router-ops/inventory/ssh-access-audit.sh' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/opt/router-ops/inventory/ssh-access-audit.sh": bad permissions
root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive).

--- home-vm103 | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094756_vm121/command.sh": error in libcrypto
root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive).

--- home-vm103 | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094857_vm121/command.sh": error in libcrypto
root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive).

============================================================
home-vm104-omr
human_command=ssh -p 65222 root@192.168.30.186
target=root@192.168.30.186
port=65222
============================================================

--- home-vm104-omr | key=/home/ops/.ssh/router_ops_ed25519 | port=65222 ---
root@192.168.30.186: Permission denied (publickey,password).

--- home-vm104-omr | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=65222 ---
root@192.168.30.186: Permission denied (publickey,password).

--- home-vm104-omr | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=65222 ---
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '/opt/router-ops/inventory/ssh-access-audit.sh' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/opt/router-ops/inventory/ssh-access-audit.sh": bad permissions
root@192.168.30.186: Permission denied (publickey,password).

--- home-vm104-omr | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=65222 ---
Load key "/opt/router-ops/runs/20260705_094756_vm121/command.sh": error in libcrypto
root@192.168.30.186: Permission denied (publickey,password).

--- home-vm104-omr | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=65222 ---
Load key "/opt/router-ops/runs/20260705_094857_vm121/command.sh": error in libcrypto
root@192.168.30.186: Permission denied (publickey,password).

============================================================
pve-ai
human_command=ssh root@192.168.30.81
target=root@192.168.30.81
port=22
============================================================

--- pve-ai | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
SSH_OK
pve-irrigation-ai
SSH_CONNECTION=192.168.30.84 41302 192.168.30.81 22

--- pve-ai | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
root@192.168.30.81: Permission denied (publickey,password).

--- pve-ai | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '/opt/router-ops/inventory/ssh-access-audit.sh' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/opt/router-ops/inventory/ssh-access-audit.sh": bad permissions
root@192.168.30.81: Permission denied (publickey,password).

--- pve-ai | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094756_vm121/command.sh": error in libcrypto
root@192.168.30.81: Permission denied (publickey,password).

--- pve-ai | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094857_vm121/command.sh": error in libcrypto
root@192.168.30.81: Permission denied (publickey,password).

============================================================
vm120-ubuntu-ai
human_command=ssh root@192.168.30.82
target=root@192.168.30.82
port=22
============================================================

--- vm120-ubuntu-ai | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
SSH_OK
ubuntu-ai
SSH_CONNECTION=192.168.30.84 49262 192.168.30.82 22

--- vm120-ubuntu-ai | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
root@192.168.30.82: Permission denied (publickey,password).

--- vm120-ubuntu-ai | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '/opt/router-ops/inventory/ssh-access-audit.sh' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/opt/router-ops/inventory/ssh-access-audit.sh": bad permissions
root@192.168.30.82: Permission denied (publickey,password).

--- vm120-ubuntu-ai | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094756_vm121/command.sh": error in libcrypto
root@192.168.30.82: Permission denied (publickey,password).

--- vm120-ubuntu-ai | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094857_vm121/command.sh": error in libcrypto
root@192.168.30.82: Permission denied (publickey,password).

============================================================
vm121-wg-access-dev
human_command=ssh root@192.168.30.83
target=root@192.168.30.83
port=22
============================================================

--- vm121-wg-access-dev | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
SSH_OK
wg-access-dev
SSH_CONNECTION=192.168.30.84 49838 192.168.30.83 22

--- vm121-wg-access-dev | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
root@192.168.30.83: Permission denied (publickey).

--- vm121-wg-access-dev | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '/opt/router-ops/inventory/ssh-access-audit.sh' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/opt/router-ops/inventory/ssh-access-audit.sh": bad permissions
root@192.168.30.83: Permission denied (publickey).

--- vm121-wg-access-dev | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094756_vm121/command.sh": error in libcrypto
root@192.168.30.83: Permission denied (publickey).

--- vm121-wg-access-dev | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
Load key "/opt/router-ops/runs/20260705_094857_vm121/command.sh": error in libcrypto
root@192.168.30.83: Permission denied (publickey).

============================================================
client001-pve
human_command=ssh root@10.71.1.222
target=root@10.71.1.222
port=22
============================================================

--- client001-pve | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
ssh: connect to host 10.71.1.222 port 22: No route to host

--- client001-pve | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
ssh: connect to host 10.71.1.222 port 22: No route to host

--- client001-pve | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
ssh: connect to host 10.71.1.222 port 22: No route to host

--- client001-pve | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.222 port 22: No route to host

--- client001-pve | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.222 port 22: No route to host

============================================================
client001-vm100
human_command=ssh root@10.71.1.1
target=root@10.71.1.1
port=22
============================================================

--- client001-vm100 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
ssh: connect to host 10.71.1.1 port 22: No route to host

--- client001-vm100 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
ssh: connect to host 10.71.1.1 port 22: No route to host

--- client001-vm100 | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
ssh: connect to host 10.71.1.1 port 22: Connection timed out

--- client001-vm100 | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.1 port 22: Connection timed out

--- client001-vm100 | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.1 port 22: Connection timed out

============================================================
client001-vm101
human_command=ssh root@10.71.1.2
target=root@10.71.1.2
port=22
============================================================

--- client001-vm101 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
ssh: connect to host 10.71.1.2 port 22: No route to host

--- client001-vm101 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
ssh: connect to host 10.71.1.2 port 22: Connection timed out

--- client001-vm101 | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
ssh: connect to host 10.71.1.2 port 22: Connection timed out

--- client001-vm101 | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.2 port 22: Connection timed out

--- client001-vm101 | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.2 port 22: Connection timed out

============================================================
client001-vm103
human_command=ssh root@10.71.1.189
target=root@10.71.1.189
port=22
============================================================

--- client001-vm103 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 ---
ssh: connect to host 10.71.1.189 port 22: No route to host

--- client001-vm103 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 ---
ssh: connect to host 10.71.1.189 port 22: Connection timed out

--- client001-vm103 | key=/opt/router-ops/inventory/ssh-access-audit.sh | port=22 ---
ssh: connect to host 10.71.1.189 port 22: Connection timed out

--- client001-vm103 | key=/opt/router-ops/runs/20260705_094756_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.189 port 22: No route to host

--- client001-vm103 | key=/opt/router-ops/runs/20260705_094857_vm121/command.sh | port=22 ---
ssh: connect to host 10.71.1.189 port 22: Connection timed out

============================================================
AUDIT_DONE
============================================================
