During the setup of a vps I created ssh keys and use those to access the vps. I installed the following software on the vps:
Tripwire Fail2ban Tiger mmap mod_security rkhunter MailUtils/postfix Logwatch Apparmor
A few days ago I discovered 2 sections (one with 1 key plus 4x another key (same key)) The keys are from: fu-infra-distrib@cache-ng
The sections mentioned contain the text: # The following ssh key was injected by Nova
I don't know whether I should remove these keys as I don't know where they are from. They are associated with the root user authorized keys.
My guess would be that one of the softwares mentioned uses the keys to perform its tasks/scans etc.
Any help appreciated.