TAG=wb_f11_940b040231 START Wed Oct 28 04:03:01 AM UTC 2026 mount_rc=0 mounted=YES umount done GOODKEY=id_ed25519_tokyo == IDENTITY -- hostname; cat /etc/hostname; echo; ip -4 addr | grep -E "inet |^[0-9]+:" ; echo; ip route | head -5 Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. C20260705111036 C20260705111036 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 inet 127.0.0.1/8 scope host lo 2: ens17: mtu 1450 qdisc mq state UP group default qlen 1000 inet 10.0.17.2/24 brd 10.0.17.255 scope global ens17 3: wg0: mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000 inet 10.66.0.3/24 scope global wg0 4: docker0: mtu 1500 qdisc noqueue state DOWN group default inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 5: br-8ffaa388cb6c: mtu 1500 qdisc noqueue state UP group default inet 172.18.0.1/16 brd 172.18.255.255 scope global br-8ffaa388cb6c default via 10.0.17.1 dev ens17 onlink 10.0.17.0/24 dev ens17 proto kernel scope link src 10.0.17.2 10.66.0.0/24 dev wg0 proto kernel scope link src 10.66.0.3 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 172.18.0.0/16 dev br-8ffaa388cb6c proto kernel scope link src 172.18.0.1 -- cat /etc/hosts Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. # Your system has configured 'manage_etc_hosts' as True. # As a result, if you wish for changes to this file to persist # then you will need to either # a.) make changes to the master file in # b.) change or remove the value of 'manage_etc_hosts' in # /etc/cloud/cloud.cfg or cloud-config from user-data # 127.0.1.1 C20250425817519.local C20260705111036 127.0.0.1 localhost # The following lines are desirable for IPv6 capable hosts ::1 localhost ip6-localhost ip6-loopback ff02::1 ip6-allnodes ff02::2 ip6-allrouters -- command -v wg >/dev/null && wg show 2>/dev/null | head -20; ls -l /etc/wireguard 2>/dev/null Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. interface: wg0 public key: private key: (hidden) listening port: 51820 peer: preshared key: (hidden) endpoint: 216.23.81.135:51820 allowed ips: 10.66.0.0/24 latest handshake: 1 minute, 44 seconds ago transfer: 7.19 GiB received, 673.95 MiB sent persistent keepalive: every 25 seconds total 12 -rw------- 1 root root 45 Oct 9 18:47 private.key -rw------- 1 root root 45 Oct 9 18:47 public.key -rw------- 1 root root 596 Oct 9 20:48 wg0.conf == HOST ROOT EVIDENCE -- id; uname -a; head -1 /proc/1/cgroup; grep CapEff /proc/self/status; head -1 /etc/shadow Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. uid=0(root) gid=0(root) groups=0(root) Linux C20260705111036 6.1.0-10-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.37-1 (2023-07-03) x86_64 GNU/Linux 0::/init.scope CapEff: 000001ffffffffff root:$6$0JFEmR1VBWiStJZK$:20203:0:99999:7::: -- ss -tlnp 2>/dev/null | head -25 Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess LISTEN 0 65535 127.0.0.1:8788 0.0.0.0:* users:(("docker-proxy",pid=1125273,fd=8)) LISTEN 0 511 0.0.0.0:8443 0.0.0.0:* users:(("nginx",pid=830793,fd=14),("nginx",pid=830792,fd=14),("nginx",pid=7918,fd=14)) LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:(("nginx",pid=830793,fd=5),("nginx",pid=830792,fd=5),("nginx",pid=7918,fd=5)) LISTEN 0 65535 0.0.0.0:111 0.0.0.0:* users:(("rpcbind",pid=1129971,fd=4),("systemd",pid=1,fd=124)) LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=6204,fd=3)) LISTEN 0 100 0.0.0.0:6080 0.0.0.0:* users:(("websockify",pid=319865,fd=3)) LISTEN 0 511 0.0.0.0:8096 0.0.0.0:* users:(("nginx",pid=830793,fd=15),("nginx",pid=830792,fd=15),("nginx",pid=7918,fd=15)) LISTEN 0 511 0.0.0.0:8000 0.0.0.0:* users:(("nginx",pid=830793,fd=13),("nginx",pid=830792,fd=13),("nginx",pid=7918,fd=13)) LISTEN 1 32 0.0.0.0:5900 0.0.0.0:* users:(("x11vnc",pid=3625782,fd=8)) LISTEN 0 65535 *:443 *:* users:(("xray",pid=3128710,fd=4)) LISTEN 0 65535 *:5201 *:* users:(("iperf3",pid=7196,fd=3)) LISTEN 0 511 [::]:80 [::]:* users:(("nginx",pid=830793,fd=6),("nginx",pid=830792,fd=6),("nginx",pid=7918,fd=6)) LISTEN 0 65535 [::]:111 [::]:* users:(("rpcbind",pid=1129971,fd=6),("systemd",pid=1,fd=126)) LISTEN 0 128 [::]:22 [::]:* users:(("sshd",pid=6204,fd=4)) LISTEN 0 65535 *:2053 *:* users:(("xray",pid=3128710,fd=7)) LISTEN 0 32 [::]:5900 [::]:* users:(("x11vnc",pid=3625782,fd=9)) -- docker ps -a --format "{{.Names}}|{{.Image}}|{{.Ports}}|{{.Status}}" Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. wb-proxy|:latest|127.0.0.1:8788->8788/tcp|Up 7 days (healthy) == CRED SURFACE (inventory only) -- ls -la /root | head -45 Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. total 2319256 drwx------ 29 root root 20480 Oct 26 20:13 . drwxr-xr-x 17 root root 4096 Oct 25 11:06 .. -rw-r--r-- 1 root root 65130 Oct 19 03:42 act_rows.png -rw-r--r-- 1 root root 1850 Oct 19 02:31 act_tab.png -rw-r--r-- 1 root root 338901 Oct 17 14:18 after_click_center.png -rw-r--r-- 1 root root 336067 Oct 17 14:21 after_escape.png -rw-r--r-- 1 root root 49871 Oct 17 14:40 after_login1.png -rw-r--r-- 1 root root 311 Oct 17 14:21 after_return.png -rwxr-xr-x 1 root root 80376 Oct 17 12:58 antidbg.dll -rw-r--r-- 1 root root 4790 Oct 17 13:17 antidbg_dll.c -rw-r--r-- 1 root root 3136 Oct 17 12:51 anti_dbg.js -rw-r--r-- 1 root root 190 Oct 17 12:59 appinit.reg -rwxr-xr-x 1 root root 944 Oct 17 14:32 auto_unmask.py -rw-r--r-- 1 root root 64872 Oct 19 02:55 b1.png -rw-r--r-- 1 root root 158435 Oct 19 03:57 base2.png -rw-r--r-- 1 root root 160396 Oct 19 02:24 base.png -rw-r--r-- 1 root root 688 Oct 17 08:57 .bashrc -rw-r--r-- 1 root root 65255 Oct 19 02:55 before_u.png -rw-r--r-- 1 root root 342 Oct 21 01:16 bottom_right.png -rw-r--r-- 1 root root 4924 Oct 17 14:20 bt2_test.log -rw-r--r-- 1 root root 1159 Oct 21 01:04 btn_row.png -rw-r--r-- 1 root root 1687 Oct 19 01:50 btn_small.png -rw-r--r-- 1 root root 3009 Oct 21 01:05 btn_verify.png -rw-r--r-- 1 root root 2389 Oct 19 01:17 btn_zoom.png -rw-r--r-- 1 root root 4924 Oct 17 14:20 bt_test.log -rw-r--r-- 1 root root 47775 Oct 19 02:55 c30.png -rw-r--r-- 1 root root 131302 Oct 19 02:57 c31.png -rw-r--r-- 1 root root 65925 Oct 19 02:59 c32.png -rw-r--r-- 1 root root 108583 Oct 19 03:20 c5.png drwxr-xr-x 9 root root 112 Oct 25 10:14 .cache -rw-r--r-- 1 root root 903 Oct 19 04:01 cb_a.png -rw-r--r-- 1 root root 1185 Oct 19 04:01 cb_ba.png -rw-r--r-- 1 root root 757 Oct 19 04:01 cb_b.png -rw-r--r-- 1 root root 942 Oct 19 03:49 cb_zoom.png -rw-r--r-- 1 root root 62128 Oct 19 01:27 ch8.png -rw-r--r-- 1 root root 2513 Oct 19 03:53 chk_now.png -rw-r--r-- 1 root root 158281 Oct 19 03:58 clean.png -rw-r--r-- 1 root root 4924 Oct 17 14:18 click_test.log -- ls -la /root/.hermes /root/.antigravity_cockpit /root/.codex /root/.claude 2>/dev/null | head -45 Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. /root/.hermes: total 28108 drwx------ 30 root root 4096 Oct 28 12:03 . drwx------ 29 root root 20480 Oct 26 20:13 .. drwx------ 2 root root 6 Oct 17 08:55 audio_cache -rw------- 1 root root 1637 Oct 24 19:34 auth.json -rw------- 1 root root 232 Oct 17 22:22 auth.json.bak -rw-r--r-- 1 root root 0 Oct 26 20:12 auth.lock drwxr-xr-x 3 root root 20 Oct 17 08:55 backups drwxr-xr-x 14 root root 4096 Oct 28 11:48 cache -rw-r--r-- 1 root root 209 Oct 28 12:02 channel_directory.json -rw------- 1 root root 5637 Oct 24 22:57 config.yaml -rw------- 1 root root 5034 Oct 17 22:22 config.yaml.bak -rw-r--r-- 1 root root 163 Oct 20 19:47 drwx------ 4 root root 4096 Oct 28 12:02 cron drwxr-xr-x 3 root root 19 Oct 17 09:28 .curator_backups -rw------- 1 root root 28197 Oct 17 13:50 .env drwxr-xr-x 2 root root 31 Oct 20 17:25 gateway -rw-r--r-- 1 root root 175 Oct 20 17:25 gateway.lock -rwxr-xr-x 1 root root 175 Oct 20 17:25 gateway.pid srw------- 1 root root 0 Oct 20 17:25 gateway.sock -rw-r--r-- 1 root root 72 Oct 20 17:25 gateway-starts.log -rw-r--r-- 1 root root 725 Oct 28 12:02 gateway_state.json drwxr-xr-x 36 root root 8192 Oct 17 13:51 hermes-agent -rw-r--r-- 1 root root 0 Oct 17 08:57 drwx------ 2 root root 6 Oct 17 08:55 hooks drwx------ 2 root root 6 Oct 17 08:55 image_cache -rw------- 1 root root 33 Oct 17 09:16 install_id -rw------- 1 root root 0 Oct 17 09:16 .install_id.lock drwxr-xr-x 3 root root 30 Oct 17 08:54 installs drwxr-xr-x 2 root root 30 Oct 17 09:16 kanban -rw-r--r-- 1 root root 118784 Oct 17 09:16 kanban.db -rw-r--r-- 1 root root 0 Oct 17 09:16 kanban.db.dispatch.lock -rw-r--r-- 1 root root 0 Oct 17 09:16 kanban.db.init.lock -rw-r--r-- 1 root root 32768 Oct 28 12:03 kanban.db-shm -rw-r--r-- 1 root root 0 Oct 28 12:02 kanban.db-wal drwx------ 5 root root 4096 Oct 26 17:13 logs drwxr-xr-x 4 root root 82 Oct 17 13:51 lsp drwx------ 2 root root 80 Oct 22 07:05 memories -- ls /root/.hermes/cron /root/.hermes/gateway /root/.hermes/hermes-agent 2>/dev/null | head -25 Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. /root/.hermes/cron: deliveries.db executions.db external-workers jobs.json jobs.json.bak-20261025 notepad.db output ticker_heartbeat ticker_last_success usage_audit.jsonl /root/.hermes/gateway: restart_loop.json : acp_adapter activate activate.fish activate.ps1 agent AGENTS.md apps assets batch_runner.py -- grep -oE "^[A-Za-z0-9_]+=" /root/.hermes/.env 2>/dev/null | head -40; echo ENVLINES=$(wc -l < /root/.hermes/.env 2>/dev/null) Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. TERMINAL_MODAL_IMAGE= TERMINAL_TIMEOUT= BROWSERBASE_PROXIES= TELEGRAM_BOT_TOKEN= TELEGRAM_ALLOWED_USERS= WEB_TOOLS_DEBUG= VISION_TOOLS_DEBUG= MOA_TOOLS_DEBUG= IMAGE_TOOLS_DEBUG= HAOYUN_API_KEY= ENVLINES=564 -- head -c 500 /root/.hermes/auth.json; echo Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. { "version": 1, "providers": {}, "credential_pool": { "custom:workbuddy": [ { "id": "77c874", "label": "WorkBuddy", "auth_type": "api_key", "priority": 0, "source": "config:WorkBuddy", "last_status": "exhausted", "last_status_at": 1792841642.9308512, "last_error_code": 429, "last_error_reason": null, "last_error_message": "上游风控已限制本区域账号（403 / code 11140，账号存在异常行 -- cat /root/.ssh/authorized_keys 2>/dev/null | head -5 | cut -c1-60; ls -la /root/.ssh 2>/dev/null Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. ssh-rsa nginx@localhost ssh-rsa ssh-ed25519 ssh-ed25519 ssh-ed25519 total 44 drwx------ 2 root root 48 Oct 20 16:31 . drwx------ 29 root root 20480 Oct 26 20:13 .. -rw------- 1 root root 1076 Oct 24 22:58 authorized_keys -rw-r--r-- 1 root root 142 Oct 20 16:31 known_hosts -- cat /etc/exports 2>/dev/null; command -v exportfs >/dev/null && exportfs -v 2>/dev/null | head Warning: Permanently added '10.66.0.3' (ED25519) to the list of known hosts. DONE Wed Oct 28 04:03:15 AM UTC 2026