=== Home Router Backup 2026-07-08 10:00:49 UTC === Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts. Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts. scp: itpp-backup-2026-07-08.rsc: No such file or directory Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts. no such item (/file/remove; line 1) The user-provided path /tmp/home-router-backup/itpp-backup-2026-07-08.rsc does not exist. FAILED: S3 upload error === Home Router Backup 2026-07-08 23:32:56 UTC === ╔══════════════════════════════════════════╗ ║ WISP Backup — 2026-07-08 ╚══════════════════════════════════════════╝ [*] Step 1: Connecting VPN ... [*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ... [route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion) [-] VPN connection failed (ppp0 not up). Cleaning up IPsec to avoid orphaned tunnel ... Check logs: journalctl -u xl2tpd -n 20 ipsec status [stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 61: /etc/xl2tpd/xl2tpd.conf: No such file or directory [stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 80: /etc/ppp/options.wisp-vpn: No such file or directory [stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 103: /etc/ppp/chap-secrets: No such file or directory [stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 124: /var/run/xl2tpd/l2tp-control: No such file or directory [stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 178: /var/run/xl2tpd/l2tp-control: No such file or directory [-] VPN connection failed. Aborting. === Exit code: 1 === === Home Router Backup 2026-07-08 23:34:04 UTC === Exception (client): Error reading SSH protocol banner Traceback (most recent call last): File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2213, in _check_banner buf = self.packetizer.readline(timeout) File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/packet.py", line 395, in readline buf += self._read_timeout(timeout) ~~~~~~~~~~~~~~~~~~^^^^^^^^^ File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/packet.py", line 665, in _read_timeout raise EOFError() EOFError During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2029, in run self._check_banner() ~~~~~~~~~~~~~~~~~~^^ File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2217, in _check_banner raise SSHException( "Error reading SSH protocol banner" + str(e) ) paramiko.ssh_exception.SSHException: Error reading SSH protocol banner ╔══════════════════════════════════════════╗ ║ WISP Backup — 2026-07-08 ╚══════════════════════════════════════════╝ [*] Step 1: Connecting VPN ... [*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ... [route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion) initiating Main Mode IKE_SA wisp-vpn[1] to 76.195.7.60 generating ID_PROT request 0 [ SA V V V V V ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (252 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (164 bytes) parsed ID_PROT response 0 [ SA V V V V ] received NAT-T (RFC 3947) vendor ID received XAuth vendor ID received DPD vendor ID received FRAGMENTATION vendor ID selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024 generating ID_PROT request 0 [ KE No NAT-D NAT-D ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (244 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (236 bytes) parsed ID_PROT response 0 [ KE No NAT-D NAT-D ] generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (108 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (92 bytes) invalid HASH_V1 payload length, decryption failed? could not decrypt payloads message parsing failed ignore malformed INFORMATIONAL request INFORMATIONAL_V1 request with message ID 966687587 processing failed received packet: from 76.195.7.60[500] to 152.53.192.33[500] (76 bytes) parsed ID_PROT response 0 [ ID HASH ] IKE_SA wisp-vpn[1] established between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60] scheduling reauthentication in 85352s maximum IKE_SA lifetime 85892s generating QUICK_MODE request 3071489454 [ HASH SA No KE ID ID ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (316 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (300 bytes) parsed QUICK_MODE response 3071489454 [ HASH SA No KE ID ID ] selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_1024/NO_EXT_SEQ CHILD_SA wisp-vpn{1} established with SPIs c8225420_i 0739aab7_o and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f] connection 'wisp-vpn' established successfully [+] VPN connected! Interface: ppp0, IP: 192.168.88.104 [*] Adding route to VPN peer's subnet via ppp0 ... [route] Added 192.168.88.0/24 via ppp0 [*] Adding static routes for tower subnets ... (no routes configured in config.yaml) [*] Checking internet connectivity ... [+] Internet reachable — VPN is safe [*] Verifying internet connectivity ... [+] Internet OK — proceeding with backup [*] Step 2: Backing up towers ... [home-gateway] (192.168.88.1) — backing up ... [FAIL] SSH connection failed: Error reading SSH protocol banner [*] Step 3: Disconnecting VPN ... [*] Tearing down VPN ... closing CHILD_SA wisp-vpn{1} with SPIs c8225420_i (1028 bytes) 0739aab7_o (1045 bytes) and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f] sending DELETE for ESP CHILD_SA with SPI c8225420 generating INFORMATIONAL_V1 request 1674779512 [ HASH D ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (76 bytes) deleting IKE_SA wisp-vpn[1] between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60] sending DELETE for IKE_SA wisp-vpn[1] generating INFORMATIONAL_V1 request 3552681913 [ HASH D ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (92 bytes) IKE_SA [1] closed successfully [+] VPN disconnected [*] Step 4: Cleaning up local temp files ... ╔══════════════════════════════════════════╗ ║ Summary: 0 OK, 1 Failed ╚══════════════════════════════════════════╝ ✗ home-gateway (home) — SSH connection failed: Error reading SSH protocol banner === Exit code: 1 === === Home Router Backup 2026-07-08 23:34:58 UTC === ╔══════════════════════════════════════════╗ ║ WISP Backup — 2026-07-08 ╚══════════════════════════════════════════╝ [*] Step 1: Connecting VPN ... [*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ... [route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion) initiating Main Mode IKE_SA wisp-vpn[2] to 76.195.7.60 generating ID_PROT request 0 [ SA V V V V V ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (252 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (164 bytes) parsed ID_PROT response 0 [ SA V V V V ] received NAT-T (RFC 3947) vendor ID received XAuth vendor ID received DPD vendor ID received FRAGMENTATION vendor ID selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024 generating ID_PROT request 0 [ KE No NAT-D NAT-D ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (244 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (236 bytes) parsed ID_PROT response 0 [ KE No NAT-D NAT-D ] generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (108 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (76 bytes) parsed ID_PROT response 0 [ ID HASH ] IKE_SA wisp-vpn[2] established between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60] scheduling reauthentication in 85828s maximum IKE_SA lifetime 86368s generating QUICK_MODE request 1842263490 [ HASH SA No KE ID ID ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (316 bytes) received packet: from 76.195.7.60[500] to 152.53.192.33[500] (300 bytes) parsed QUICK_MODE response 1842263490 [ HASH SA No KE ID ID ] selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_1024/NO_EXT_SEQ CHILD_SA wisp-vpn{2} established with SPIs c3a88a35_i 0030d7ca_o and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f] generating QUICK_MODE request 1842263490 [ HASH ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (60 bytes) connection 'wisp-vpn' established successfully [+] VPN connected! Interface: ppp0, IP: 192.168.88.104 [*] Adding route to VPN peer's subnet via ppp0 ... [route] Added 192.168.88.0/24 via ppp0 [*] Adding static routes for tower subnets ... (no routes configured in config.yaml) [*] Checking internet connectivity ... [+] Internet reachable — VPN is safe [*] Verifying internet connectivity ... [+] Internet OK — proceeding with backup [*] Step 2: Backing up towers ... [home-gateway] (10.77.0.2) — backing up ... Fetching config ... [s3] Uploaded → s3://mikrotik-ccr-backups/wisp-backups/configs/home/2026-07-08/home-gateway-2026-07-08.rsc.gz Fetching last 500 log lines ... [warn] Command exited 1: [s3] Uploaded → s3://mikrotik-ccr-backups/wisp-backups/logs/home/2026-07-08/home-gateway-2026-07-08.log.gz [*] Step 3: Disconnecting VPN ... [*] Tearing down VPN ... closing CHILD_SA wisp-vpn{2} with SPIs c3a88a35_i (848 bytes) 0030d7ca_o (829 bytes) and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f] sending DELETE for ESP CHILD_SA with SPI c3a88a35 generating INFORMATIONAL_V1 request 2340666817 [ HASH D ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (76 bytes) deleting IKE_SA wisp-vpn[2] between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60] sending DELETE for IKE_SA wisp-vpn[2] generating INFORMATIONAL_V1 request 257487867 [ HASH D ] sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (92 bytes) IKE_SA [2] closed successfully [+] VPN disconnected [*] Step 4: Cleaning up local temp files ... ╔══════════════════════════════════════════╗ ║ Summary: 1 OK, 0 Failed ╚══════════════════════════════════════════╝ ✓ home-gateway (home) — config ✓ logs ✓ === Exit code: 0 ===