SSH ACCESS AUDIT time=2026-07-11T12:07:34+00:00 host=router-ops ============================================================ SSH CONFIG HOST BLOCKS ============================================================ Host pve-mgts HostName 10.71.100.222 User root IdentityFile ~/.ssh/router_ops_pve_mgts_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new Host pve-mgts-old-ddn HostName 192.168.30.249 User root IdentityFile ~/.ssh/router_ops_pve_mgts_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new Host home-vm100 HostName 192.168.30.1 User root IdentityFile ~/.ssh/router_ops_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new Host pve-ai HostName 192.168.30.81 User root IdentityFile ~/.ssh/router_ops_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new Host ubuntu-ai HostName 192.168.30.82 User root IdentityFile ~/.ssh/router_ops_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new Host vm121 HostName 192.168.30.83 User root IdentityFile ~/.ssh/router_ops_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new Host wg-access-dev HostName 192.168.30.83 User root IdentityFile ~/.ssh/router_ops_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new Host home-vm101 HostName 192.168.30.2 User root Port 22 IdentityFile ~/.ssh/router_ops_ed25519 IdentitiesOnly yes StrictHostKeyChecking accept-new ============================================================ PRIVATE KEY FILE CANDIDATES, PATHS AND FINGERPRINTS ONLY ============================================================ --- /home/ops/.ssh/authorized_keys -rw------- 1 ops ops 421 Jul 10 07:05 /home/ops/.ssh/authorized_keys 256 SHA256:7BfZ684BcJ0J/ZzszGADvP0KSTuJEjk4GYTdImbhkaE vm130-router-ops-admin (ED25519) 256 SHA256:Ls2CG2r+L0P7rKPlrajMdYiHAe4tRc3UI9vUBf9vXVU vm130-router-ops-runner (ED25519) 256 SHA256:fLVhjS0owzATtXYZ2BC9Vk6TvBIrWo/oX/V5mMKx+vA router-ops-client-windows (ED25519) 256 SHA256:MY7XA1t647fjQ/Kj9jzJNpdo0ScKr+oBWoZ7/Trsbpg dmitry-phone-router-ops (ED25519) --- /home/ops/.ssh/router_ops_ed25519 -rw------- 1 ops ops 419 Jul 5 09:21 /home/ops/.ssh/router_ops_ed25519 256 SHA256:Ls2CG2r+L0P7rKPlrajMdYiHAe4tRc3UI9vUBf9vXVU vm130-router-ops-runner (ED25519) --- /home/ops/.ssh/router_ops_pve_mgts_ed25519 -rw------- 1 ops ops 419 Jul 6 08:54 /home/ops/.ssh/router_ops_pve_mgts_ed25519 256 SHA256:VioyXWj0uRI3X1JCLxz/hqP9KgeYujWbl/84FotLrys router-ops-to-pve-mgts (ED25519) ============================================================ CURRENT ROUTES ============================================================ default via 192.168.30.1 dev eth0 proto dhcp src 192.168.30.84 metric 100 10.71.100.0/24 dev router-ops-mgts scope link 10.200.0.0/24 dev router-ops-mgts scope link 10.201.0.0/24 dev router-ops-mgts scope link 10.250.100.0/24 dev router-ops-mgts scope link 192.168.30.0/24 dev eth0 proto kernel scope link src 192.168.30.84 metric 100 192.168.30.1 dev eth0 proto dhcp scope link src 192.168.30.84 metric 100 ============================================================ REACHABILITY/AUTH TESTS No keys are created. known_hosts is not modified. Host key checking is bypassed only for this audit using UserKnownHostsFile=/dev/null. ============================================================ ------------------------------------------------------------ Alias/native test ------------------------------------------------------------ --- pve-mgts via configured alias --- SSH_OK SSH_CONNECTION=10.250.100.4 49142 10.71.100.222 22 pve-wg-paid ------------------------------------------------------------ Per-key tests ------------------------------------------------------------ ============================================================ home-vm100 human_command=ssh root@192.168.30.1 target=root@192.168.30.1 port=22 ============================================================ --- home-vm100 | key=/home/ops/.ssh/authorized_keys | port=22 --- root@192.168.30.1: Permission denied (publickey,password). --- home-vm100 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- SSH_OK OpenWrt SSH_CONNECTION=192.168.30.84 36248 192.168.30.1 22 --- home-vm100 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- root@192.168.30.1: Permission denied (publickey,password). ============================================================ home-vm101 human_command=ssh root@192.168.30.2 target=root@192.168.30.2 port=22 ============================================================ --- home-vm101 | key=/home/ops/.ssh/authorized_keys | port=22 --- root@192.168.30.2: Permission denied (publickey,password). --- home-vm101 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- SSH_OK OpenWrt SSH_CONNECTION=192.168.30.84 60614 192.168.30.2 22 --- home-vm101 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- root@192.168.30.2: Permission denied (publickey,password). ============================================================ home-vm103 human_command=ssh root@192.168.30.189 target=root@192.168.30.189 port=22 ============================================================ --- home-vm103 | key=/home/ops/.ssh/authorized_keys | port=22 --- root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive). --- home-vm103 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive). --- home-vm103 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- root@192.168.30.189: Permission denied (publickey,password,keyboard-interactive). ============================================================ home-vm104-omr human_command=ssh -p 65222 root@192.168.30.186 target=root@192.168.30.186 port=65222 ============================================================ --- home-vm104-omr | key=/home/ops/.ssh/authorized_keys | port=65222 --- root@192.168.30.186: Permission denied (publickey,password). --- home-vm104-omr | key=/home/ops/.ssh/router_ops_ed25519 | port=65222 --- root@192.168.30.186: Permission denied (publickey,password). --- home-vm104-omr | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=65222 --- root@192.168.30.186: Permission denied (publickey,password). ============================================================ pve-ai human_command=ssh root@192.168.30.81 target=root@192.168.30.81 port=22 ============================================================ --- pve-ai | key=/home/ops/.ssh/authorized_keys | port=22 --- root@192.168.30.81: Permission denied (publickey,password). --- pve-ai | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- SSH_OK pve-irrigation-ai SSH_CONNECTION=192.168.30.84 36050 192.168.30.81 22 --- pve-ai | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- root@192.168.30.81: Permission denied (publickey,password). ============================================================ vm120-ubuntu-ai human_command=ssh root@192.168.30.82 target=root@192.168.30.82 port=22 ============================================================ --- vm120-ubuntu-ai | key=/home/ops/.ssh/authorized_keys | port=22 --- root@192.168.30.82: Permission denied (publickey,password). --- vm120-ubuntu-ai | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- SSH_OK ubuntu-ai SSH_CONNECTION=192.168.30.84 40190 192.168.30.82 22 --- vm120-ubuntu-ai | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- root@192.168.30.82: Permission denied (publickey,password). ============================================================ vm121-wg-access-dev human_command=ssh root@192.168.30.83 target=root@192.168.30.83 port=22 ============================================================ --- vm121-wg-access-dev | key=/home/ops/.ssh/authorized_keys | port=22 --- root@192.168.30.83: Permission denied (publickey). --- vm121-wg-access-dev | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- SSH_OK wg-access-dev SSH_CONNECTION=192.168.30.84 35690 192.168.30.83 22 --- vm121-wg-access-dev | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- root@192.168.30.83: Permission denied (publickey). ============================================================ client001-pve human_command=ssh root@10.71.1.222 target=root@10.71.1.222 port=22 ============================================================ --- client001-pve | key=/home/ops/.ssh/authorized_keys | port=22 --- ssh: connect to host 10.71.1.222 port 22: No route to host --- client001-pve | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- ssh: connect to host 10.71.1.222 port 22: No route to host --- client001-pve | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- ssh: connect to host 10.71.1.222 port 22: No route to host ============================================================ client001-vm100 human_command=ssh root@10.71.1.1 target=root@10.71.1.1 port=22 ============================================================ --- client001-vm100 | key=/home/ops/.ssh/authorized_keys | port=22 --- ssh: connect to host 10.71.1.1 port 22: No route to host --- client001-vm100 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- ssh: connect to host 10.71.1.1 port 22: No route to host --- client001-vm100 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- ssh: connect to host 10.71.1.1 port 22: No route to host ============================================================ client001-vm101 human_command=ssh root@10.71.1.2 target=root@10.71.1.2 port=22 ============================================================ --- client001-vm101 | key=/home/ops/.ssh/authorized_keys | port=22 --- ssh: connect to host 10.71.1.2 port 22: No route to host --- client001-vm101 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- ssh: connect to host 10.71.1.2 port 22: Connection timed out --- client001-vm101 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- ssh: connect to host 10.71.1.2 port 22: Connection timed out ============================================================ client001-vm103 human_command=ssh root@10.71.1.189 target=root@10.71.1.189 port=22 ============================================================ --- client001-vm103 | key=/home/ops/.ssh/authorized_keys | port=22 --- ssh: connect to host 10.71.1.189 port 22: Connection timed out --- client001-vm103 | key=/home/ops/.ssh/router_ops_ed25519 | port=22 --- ssh: connect to host 10.71.1.189 port 22: No route to host --- client001-vm103 | key=/home/ops/.ssh/router_ops_pve_mgts_ed25519 | port=22 --- ssh: connect to host 10.71.1.189 port 22: Connection timed out ============================================================ AUDIT_DONE ============================================================ audit_saved=/opt/router-ops/inventory/ssh-access-audit-20260711_120734.txt