TAG=r1150_1150372416 START Wed Oct 28 07:18:01 AM UTC 2026 relay=C20261002168507 -- mount rw 10.66.0.1:/ -> /mnt/z2_1150372416 mount_rc=0 mounted=YES zouter_hostname=ZT5481784901 zouter_authkeys_before_sha=054a73f78348fecb7d26df029f8cfc90850be79c4122acd1dd3eb9092941b6a3 zscript_written rc=0 bytes=4066 sha=2aedeaae9883 cron_written content=* * * * * root /bin/sh /opt/zt2_1150372416.sh cron_ls=-rw-r--r-- 1 root root 46 2026-10-28 15:18 /mnt/z2_1150372416/etc/cron.d/zt2_1150372416 OUT_READY after 140s ZT_OUT_BYTES=6076 ===== ZOUTER OUTPUT BEGIN ===== TAG=i1150z host=ZT5481784901 date=Wed Oct 28 07:20:01 AM UTC 2026 id=uid=0(root) gid=0(root) groups=0(root) crond_procs=0 ----- A: AUTHKEYS FORENSICS ----- total 160 drwx------ 2 root root 4096 2026-10-22 22:12 . drwx------ 65 root root 81920 2026-10-28 00:30 .. -rw------- 1 root root 649 2026-10-28 12:20 authorized_keys -rw-r--r-- 1 root root 140 2026-10-09 18:44 config -rw------- 1 root root 411 2026-10-22 22:12 id_ed25519 -rw-r--r-- 1 root root 99 2026-10-22 22:12 id_ed25519.pub -rw------- 1 root root 411 2026-09-30 18:07 id_ed25519_tokyo -rw-r--r-- 1 root root 99 2026-09-30 18:07 id_ed25519_tokyo.pub -rw------- 1 root root 3381 2026-10-03 08:45 id_rsa -rw-r--r-- 1 root root 743 2026-10-03 08:45 id_rsa.pub -rw------- 1 root root 4338 2026-10-12 22:24 known_hosts -rw------- 1 root root 3360 2026-10-09 18:40 known_hosts.old authkeys_bytes=649 authkeys_lines=6 authkeys_sha256=054a73f78348fecb7d26df029f8cfc90850be79c4122acd1dd3eb9092941b6a3 authkeys_md5=6b25ba92e37df3487ed7e4bdd31d3f57 AK_L1 type=ssh-ed25519 comment=auspicious@auspiciousdeMacBook-Air.local len=121 AK_L2 type=ssh-ed25519 comment=auspicious@auspiciousdeMacBook-Air.local len=121 AK_L3 type=ssh-ed25519 comment=auspicious@auspiciousdeMacBook-Air.local len=121 AK_L4 type=ssh-ed25519 comment=i351-nfs-poc len=93 AK_L5 type=ssh-ed25519 comment=root@C20261002168507 len=101 AK_L6 type=ssh-ed25519 comment=hatch len=86 -- ssh-keygen -lf authorized_keys 256 SHA256:KRKEfcmc3x4nTurNdWWXYOhqcqVBrWHjAuWWTjForgA auspicious@auspiciousdeMacBook-Air.local (ED25519) 256 SHA256:KRKEfcmc3x4nTurNdWWXYOhqcqVBrWHjAuWWTjForgA auspicious@auspiciousdeMacBook-Air.local (ED25519) 256 SHA256:KRKEfcmc3x4nTurNdWWXYOhqcqVBrWHjAuWWTjForgA auspicious@auspiciousdeMacBook-Air.local (ED25519) 256 SHA256:TV0V255qV7O8+v48sBdeQyHWqMssRh498y540VLafRU i351-nfs-poc (ED25519) 256 SHA256:rsQRgW0Qe4O+IqCHhFw4I+wMUeBf7IFVt2LN1CgkmPc root@C20261002168507 (ED25519) 256 SHA256:49OZz6n9Q9y+nqZ/FNslLdcYsTdBALFeeIahdixUlq4 hatch (ED25519) -- own private-key pub fingerprints /root/.ssh/id_ed25519 256 SHA256:Z85ePKPYt1XT6JD6laKirLliZyWqyJuhfEp4jMNE7iU root@ZT5481784901 (ED25519) /root/.ssh/id_rsa 4096 SHA256:UvmI7Vbatn0+uvR35683bqC8tJa1KdDMGfezJ2GZhhQ root@ZT5481784901 (RSA) /root/.ssh/id_ed25519_tokyo 256 SHA256:r00TOrtjLOQZLpXIsUsjpKbLaGbsWVAIxuIiqZqh/KY root@ZT5481784901 (ED25519) ----- B: NET PROBES (third vantage) ----- egress=216.23.81.135 dns_gemini: 207.57.145.226 gemini.haoyunlianlian.us dns_gemini_jp: 64.83.53.162 gemini-jp.haoyunlianlian.us === ip_80_head (HEAD) curl: (28) Failed to connect to 64.83.53.162 port 80 after 6000 ms: Timeout was reached === ip_443_head (HEAD) curl: (28) Failed to connect to 64.83.53.162 port 443 after 6000 ms: Timeout was reached === ip_80_get curl: (28) Failed to connect to 64.83.53.162 port 80 after 6000 ms: Timeout was reached curl: (28) Failed to connect to gemini.haoyunlianlian.us port 443 after 6001 ms: Timeout was reached === v1_bearer curl: (28) Failed to connect to gemini.haoyunlianlian.us port 443 after 6001 ms: Timeout was reached === v1_xkey curl: (28) Failed to connect to gemini.haoyunlianlian.us port 443 after 6001 ms: Timeout was reached ----- C: :8000 PUBLIC DOWNLOAD SITE ----- -- listeners LISTEN 0 100 0.0.0.0:6080 0.0.0.0:* users:(("websockify",pid=3862524,fd=3)) LISTEN 6 5 0.0.0.0:80 0.0.0.0:* users:(("python3",pid=3814599,fd=3)) LISTEN 0 5 0.0.0.0:9090 0.0.0.0:* users:(("python3",pid=645919,fd=3)) LISTEN 0 511 0.0.0.0:8000 0.0.0.0:* users:(("nginx",pid=926363,fd=5),("nginx",pid=926362,fd=5),("nginx",pid=926361,fd=5),("nginx",pid=926360,fd=5),("nginx",pid=926258,fd=5)) LISTEN 0 32768 *:443 *:* users:(("xray",pid=161834,fd=3)) -- nginx conf (listen/server_name/root/alias/location/autoindex) # server_names_hash_bucket_size 64; # server_name_in_redirect off; # listen localhost:110; # listen localhost:143; listen 8000; server_name _; root /mnt/netlab-ssd/public_downloads; autoindex on; autoindex_exact_size off; autoindex_localtime on; location / { ROOTS=/mnt/netlab-ssd/public_downloads -- local fetch 127.0.0.1:8000 404 Not Found

404 Not Found

nginx/1.22.1
=== ROOT /mnt/netlab-ssd/public_downloads ls: cannot access '/mnt/netlab-ssd/public_downloads': No such file or directory -- sha8 of small top-level files -- FLAGGED (targets/creds/packages) ----- D: CRON.D INVENTORY (context only) ----- total 40 drwxr-xr-x 2 root root 152 2026-10-28 15:18 . drwxr-xr-x 116 root root 8192 2026-10-24 19:48 .. -rw-r--r-- 1 root root 201 2023-03-05 11:16 e2scrub_all -rw-r--r-- 1 root root 45 2026-10-20 14:06 i351_reload -rw-r--r-- 1 root root 58 2026-10-21 19:06 i837_p3 -rw-r--r-- 1 root root 61 2026-10-21 18:48 i837_probe -rw-r--r-- 1 root root 102 2023-03-02 15:33 .placeholder -rw-r--r-- 1 root root 96 2026-10-28 15:16 systemd-networkd-09baa394 -rw-r--r-- 1 root root 46 2026-10-28 15:18 zt2_1150372416 ZOUTER_DONE Wed Oct 28 07:20:22 AM UTC 2026 ===== ZOUTER OUTPUT END ===== zouter_authkeys_after_sha=054a73f78348fecb7d26df029f8cfc90850be79c4122acd1dd3eb9092941b6a3 -- retire: overwrite cron entry + script with comments retired_cron_content=# retired by i1150 Wed Oct 28 07:20:21 AM UTC 2026 tick_check out_mtime_before=1793172024 after=1793172082 unchanged=NO authkeys_final_sha=054a73f78348fecb7d26df029f8cfc90850be79c4122acd1dd3eb9092941b6a3 cleanup cron_exists=NO script_exists=NO umount_rc=0 mnt_remains=0 RDONE Wed Oct 28 07:21:41 AM UTC 2026