TAG=r987_9871793173012 START Wed Oct 28 07:39:01 AM UTC 2026 relay=C20261002168507 -- A: task target list lookup (bounded) -- B: relay local listeners (context) -- C: mount rw ZOUTER:/ -> /mnt/z987_9871793173012 mount_rc=0 mounted=YES zouter_hostname=ZT5481784901 zscript_written rc=0 bytes=2754 cron_written=* * * * * root /bin/sh /opt/zt987_9871793173012.sh OUT_READY after 90s ZT_OUT_BYTES=23143 ===== ZOUTER OUTPUT BEGIN ===== TAG=i987z host=ZT5481784901 date=Wed Oct 28 07:40:01 AM UTC 2026 id=uid=0(root) gid=0(root) groups=0(root) uptime= 15:40:01 up 41 days, 5:22, 0 user, load average: 0.28, 0.49, 0.51 ===== A: LISTENERS (ss -tlnp) ===== State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess LISTEN 0 128 127.0.0.1:11027 0.0.0.0:* users:(("cockpit-tools",pid=660822,fd=43)) LISTEN 0 4096 0.0.0.0:42351 0.0.0.0:* users:(("rpc.statd",pid=3834541,fd=8)) LISTEN 0 64 0.0.0.0:22365 0.0.0.0:* LISTEN 0 100 0.0.0.0:6080 0.0.0.0:* users:(("websockify",pid=3862524,fd=3)) LISTEN 0 32768 127.0.0.1:20241 0.0.0.0:* users:(("cloudflared",pid=3814858,fd=7)) LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=733,fd=3)) LISTEN 6 5 0.0.0.0:80 0.0.0.0:* users:(("python3",pid=3814599,fd=3)) LISTEN 0 4096 0.0.0.0:111 0.0.0.0:* users:(("rpcbind",pid=3834064,fd=4),("systemd",pid=1,fd=117)) LISTEN 0 5 0.0.0.0:8765 0.0.0.0:* users:(("python3",pid=3814665,fd=3)) LISTEN 0 5 0.0.0.0:8899 0.0.0.0:* users:(("python3",pid=3726363,fd=3)) LISTEN 0 5 0.0.0.0:9090 0.0.0.0:* users:(("python3",pid=645919,fd=3)) LISTEN 0 4096 0.0.0.0:48183 0.0.0.0:* users:(("rpc.mountd",pid=3834547,fd=9)) LISTEN 0 4096 0.0.0.0:23613 0.0.0.0:* users:(("rpc.mountd",pid=3834547,fd=5)) LISTEN 0 128 0.0.0.0:19528 0.0.0.0:* users:(("cockpit-tools",pid=660822,fd=35)) LISTEN 0 4096 0.0.0.0:52881 0.0.0.0:* users:(("rpc.mountd",pid=3834547,fd=13)) LISTEN 2 128 216.23.81.135:64130 0.0.0.0:* users:(("udp2raw",pid=82716,fd=9)) LISTEN 0 511 0.0.0.0:8000 0.0.0.0:* users:(("nginx",pid=926363,fd=5),("nginx",pid=926362,fd=5),("nginx",pid=926361,fd=5),("nginx",pid=926360,fd=5),("nginx",pid=926258,fd=5)) LISTEN 0 5 0.0.0.0:8090 0.0.0.0:* users:(("python3",pid=767186,fd=3)) LISTEN 0 64 0.0.0.0:2049 0.0.0.0:* LISTEN 0 5 127.0.0.1:5901 0.0.0.0:* users:(("Xtigervnc",pid=418106,fd=9)) LISTEN 0 128 [::]:22 [::]:* users:(("sshd",pid=733,fd=4)) LISTEN 0 4096 [::]:111 [::]:* users:(("rpcbind",pid=3834064,fd=6),("systemd",pid=1,fd=119)) LISTEN 0 4096 [::]:53473 [::]:* users:(("rpc.statd",pid=3834541,fd=10)) LISTEN 0 32768 *:443 *:* users:(("xray",pid=161834,fd=3)) LISTEN 0 4096 [::]:49739 [::]:* users:(("rpc.mountd",pid=3834547,fd=15)) LISTEN 0 4096 [::]:40257 [::]:* users:(("rpc.mountd",pid=3834547,fd=7)) LISTEN 0 64 [::]:19821 [::]:* LISTEN 0 64 [::]:2049 [::]:* LISTEN 0 4096 [::]:43597 [::]:* users:(("rpc.mountd",pid=3834547,fd=11)) LISTEN 0 5 [::1]:5901 [::]:* users:(("Xtigervnc",pid=418106,fd=10)) ===== B: UDP (bounded) ===== State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess UNCONN 0 0 0.0.0.0:20355 0.0.0.0:* users:(("rpc.mountd",pid=3834547,fd=4)) UNCONN 0 0 0.0.0.0:111 0.0.0.0:* users:(("rpcbind",pid=3834064,fd=5),("systemd",pid=1,fd=118)) UNCONN 0 0 0.0.0.0:49429 0.0.0.0:* users:(("rpc.mountd",pid=3834547,fd=8)) UNCONN 0 0 0.0.0.0:54017 0.0.0.0:* UNCONN 0 0 127.0.0.1:909 0.0.0.0:* users:(("rpc.statd",pid=3834541,fd=4)) UNCONN 0 0 0.0.0.0:5353 0.0.0.0:* users:(("avahi-daemon",pid=99765,fd=11)) UNCONN 0 0 0.0.0.0:30833 0.0.0.0:* users:(("avahi-daemon",pid=99765,fd=13)) UNCONN 0 0 0.0.0.0:10460 0.0.0.0:* users:(("rpc.mountd",pid=3834547,fd=12)) UNCONN 0 0 0.0.0.0:26867 0.0.0.0:* users:(("rpc.statd",pid=3834541,fd=7)) UNCONN 0 0 0.0.0.0:51820 0.0.0.0:* UNCONN 0 0 127.0.0.1:51821 0.0.0.0:* users:(("udp2raw",pid=82716,fd=8)) UNCONN 0 0 *:52675 *:* users:(("cloudflared",pid=3814858,fd=3)) UNCONN 0 0 [::]:111 [::]:* users:(("rpcbind",pid=3834064,fd=7),("systemd",pid=1,fd=121)) UNCONN 0 0 *:443 *:* users:(("hysteria",pid=169463,fd=3)) UNCONN 0 0 *:21007 *:* users:(("xray",pid=161834,fd=92)) UNCONN 0 0 [::]:54120 [::]:* users:(("rpc.mountd",pid=3834547,fd=6)) UNCONN 0 0 [::]:5353 [::]:* users:(("avahi-daemon",pid=99765,fd=12)) UNCONN 0 0 [::]:13684 [::]:* users:(("rpc.mountd",pid=3834547,fd=10)) UNCONN 0 0 [::]:42536 [::]:* users:(("rpc.statd",pid=3834541,fd=9)) ===== C: PID ATTRIBUTION for 8090/22365/6080/5901/8765/8000/443 ===== -- port 8090 LISTEN 0 5 0.0.0.0:8090 0.0.0.0:* users:(("python3",pid=767186,fd=3)) -- port 22365 LISTEN 0 64 0.0.0.0:22365 0.0.0.0:* -- port 6080 LISTEN 0 100 0.0.0.0:6080 0.0.0.0:* users:(("websockify",pid=3862524,fd=3)) -- port 5901 LISTEN 0 5 127.0.0.1:5901 0.0.0.0:* users:(("Xtigervnc",pid=418106,fd=9)) LISTEN 0 5 [::1]:5901 [::]:* users:(("Xtigervnc",pid=418106,fd=10)) -- port 8765 LISTEN 0 5 0.0.0.0:8765 0.0.0.0:* users:(("python3",pid=3814665,fd=3)) -- port 8000 LISTEN 0 511 0.0.0.0:8000 0.0.0.0:* users:(("nginx",pid=926363,fd=5),("nginx",pid=926362,fd=5),("nginx",pid=926361,fd=5),("nginx",pid=926360,fd=5),("nginx",pid=926258,fd=5)) -- port 443 LISTEN 0 32768 *:443 *:* users:(("xray",pid=161834,fd=3)) -- port 9090 LISTEN 0 5 0.0.0.0:9090 0.0.0.0:* users:(("python3",pid=645919,fd=3)) -- port 2222 -- port 22365 LISTEN 0 64 0.0.0.0:22365 0.0.0.0:* -- pid -> exe/cmd PID=1 exe=/usr/lib/systemd/systemd cwd=/ cmd=/lib/systemd/systemd --system --deserialize=32 PID=161834 exe=/usr/local/bin/xray cwd=/ cmd=/usr/local/bin/xray run -config /usr/local/etc/xray/config.json PID=3726363 exe=/usr/bin/python3.11 cwd=/root/.antigravity_cockpit/instances/zcode/243a413f411aa795/data/.zcode/workspace/default cmd=python3 /tmp/dlserver.py PID=3814599 exe=/usr/bin/python3.11 cwd=/ cmd=/usr/bin/python3 /opt/upload_server.py PID=3814665 exe=/usr/bin/python3.11 cwd=/root/.antigravity_cockpit/instances/zcode/243a413f411aa795/data/.zcode/workspace/default cmd=python3 upload_server.py PID=3814858 exe=/usr/local/bin/cloudflared cwd=/root/.antigravity_cockpit/instances/zcode/243a413f411aa795/data/.zcode/workspace/default cmd=/usr/local/bin/cloudflared tunnel --url http://127.0.0.1:8765 --no-autoupdate PID=3834064 exe=/usr/sbin/rpcbind cwd=/ cmd=/sbin/rpcbind -f -w PID=3834541 exe=/usr/sbin/rpc.statd cwd=/var/lib/nfs cmd=/sbin/rpc.statd PID=3834547 exe=/usr/sbin/rpc.mountd cwd=/ cmd=/usr/sbin/rpc.mountd PID=3862524 exe=/usr/bin/python3.11 cwd=/usr/share/novnc cmd=/usr/bin/python3 /usr/bin/websockify --web /usr/share/novnc 6080 127.0.0.1:5901 PID=418106 exe=/usr/bin/Xtigervnc cwd=/tmp/tigervnc.qfZ2Ww cmd=/usr/bin/Xtigervnc :1 -localhost=1 -desktop ZT5481784901.local:1 (root) -rfbport 5901 -SecurityTypes None -auth /root/.Xauthority -geometry 1920x1080 -depth 24 PID=645919 exe=/usr/bin/python3.11 cwd=/root/chain-service cmd=/usr/bin/python3 /root/chain-service/server.py PID=660822 exe=/usr/bin/cockpit-tools cwd=/root cmd=/usr/bin/cockpit-tools PID=733 exe=/usr/sbin/sshd cwd=/ cmd=sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups PID=767186 exe=/usr/bin/python3.11 cwd=/root/.antigravity_cockpit/instances/zcode/243a413f411aa795/data/.zcode/workspace/default cmd=python3 upserver_public.py 8090 PID=82716 exe=/usr/local/bin/udp2raw cwd=/ cmd=/usr/local/bin/udp2raw -c -l 127.0.0.1:51821 -r 154.36.154.45:4099 -k b4e78654a925e546 --raw-mode faketcp --cipher-mode aes128cbc --auth-mode hmac_sha1 -a --log-level 2 PID=926258 exe=/usr/sbin/nginx cwd=/ cmd=nginx: master process /usr/sbin/nginx -g daemon on; master_process on; PID=926360 exe=/usr/sbin/nginx cwd=/ cmd=nginx: worker process PID=926361 exe=/usr/sbin/nginx cwd=/ cmd=nginx: worker process PID=926362 exe=/usr/sbin/nginx cwd=/ cmd=nginx: worker process PID=926363 exe=/usr/sbin/nginx cwd=/ cmd=nginx: worker process ===== D: PROCESS TABLE (filtered) ===== 196 2 root 41-05:22:40 [xfs-inodegc/vda] 733 1 root 41-05:22:35 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups 161834 1 nobody 41-02:39:16 /usr/local/bin/xray run -config /usr/local/etc/xray/config.json 421320 420970 root 3-17:28:14 /proc/self/exe --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --no-sandbox --disable-dev-shm-usage --no-warnings --crashpad-handler-pid=421102 --enable-crash-reporter=3a881383-6a28-48b2-a7b5-65aea7e61844,no_channel --user-data-dir=/root/.antigravity_cockpit/instances/zcode/243a413f411aa795/data/.config/ZCode --standard-schemes=zcode-media,zcode-sandbox --secure-schemes=zcode-media,zcode-sandbox --cors-schemes=rum-event --fetch-schemes=zcode-sandbox --streaming-schemes=zcode-media --shared-files=v8_context_snapshot_data:100 --field-trial-handle=3,i,6974119263190636170,9347841674163900853,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=7,i,324245810064153341,1213019924298084256,4 --trace-process-track-uuid=3190708991934122588 421686 421241 root 3-17:28:01 /proc/self/exe --type=utility --utility-sub-type=node.mojom.NodeService --lang=en-US --service-sandbox-type=none --no-sandbox --disable-dev-shm-usage --no-warnings --crashpad-handler-pid=421435 --enable-crash-reporter=3a881383-6a28-48b2-a7b5-65aea7e61844,no_channel --user-data-dir=/root/.antigravity_cockpit/instances/zcode/a954f1b73fbd06ba/data/.config/ZCode --standard-schemes=zcode-media,zcode-sandbox --secure-schemes=zcode-media,zcode-sandbox --cors-schemes=rum-event --fetch-schemes=zcode-sandbox --streaming-schemes=zcode-media --shared-files=v8_context_snapshot_data:100 --field-trial-handle=3,i,1849083310233263786,1664837398261990997,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=7,i,17541383765669479190,9658797835539167300,4 --trace-process-track-uuid=3190708991934122588 421891 421530 root 3-17:27:55 zcode-node-repl-mcp 422557 422250 root 3-17:27:14 zcode-node-repl-mcp 423540 421898 root 3-17:25:42 zcode-node-repl-mcp 607384 3726346 root 3-00:07:05 /usr/local/lib/hermes-agent/venv/bin/python /tmp/hermes_kernel_slzf5exw/hermes_kernel_runner.py 610828 1 root 2-23:46:13 /usr/bin/python3 /root/scripts/ppt_continuous_pipeline.py 645919 1 root 39-18:43:38 /usr/bin/python3 /root/chain-service/server.py 663678 1 root 2-16:32:43 /usr/bin/python3 /opt/codex-tg-bot/bot.py 767186 1 root 2-02:49:02 python3 upserver_public.py 8090 794009 1 root 1-23:51:01 /root/.cache/uv/archive-v0/Jp46fNkVnDxPJMjE/bin/python -m browser_harness.daemon 843756 1 root 20-06:50:56 /usr/local/lib/hermes-agent/venv/bin/python -m hermes_cli.main gateway run 926258 1 root 18-18:50:17 nginx: master process /usr/sbin/nginx -g daemon on; master_process on; 926360 926258 www-data 18-18:49:10 nginx: worker process 926361 926258 www-data 18-18:49:10 nginx: worker process 926362 926258 www-data 18-18:49:10 nginx: worker process 926363 926258 www-data 18-18:49:10 nginx: worker process 3726346 1 root 12-22:58:08 /usr/local/lib/hermes-agent/venv/bin/python -m hermes_cli.main -p 135bot gateway run 3726363 1 root 29-01:33:17 python3 /tmp/dlserver.py 3782751 1 root 11-06:24:05 /usr/bin/python3 /usr/bin/fail2ban-server -xf start 3814599 1 root 28-04:25:38 /usr/bin/python3 /opt/upload_server.py 3814665 1 root 28-04:25:14 python3 upload_server.py 3862524 1 root 9-17:45:15 /usr/bin/python3 /usr/bin/websockify --web /usr/share/novnc 6080 127.0.0.1:5901 ===== E: LOCAL HTTP FINGERPRINTS (127.0.0.1) ===== === p8090_root HTTP/1.1 404 Not Found Server: UpBox/1.0 Python/3.11.2 Date: Wed, 28 Oct 2026 07:40:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 64 Cache-Control: no-store

404

需要完整的带令牌链接才能访问。

=== p8090_status HTTP/1.1 404 Not Found Server: UpBox/1.0 Python/3.11.2 Date: Wed, 28 Oct 2026 07:40:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 64 Cache-Control: no-store

404

需要完整的带令牌链接才能访问。

=== p8090_api_status HTTP/1.1 404 Not Found Server: UpBox/1.0 Python/3.11.2 Date: Wed, 28 Oct 2026 07:40:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 64 Cache-Control: no-store

404

需要完整的带令牌链接才能访问。

=== p22365_root curl: (52) Empty reply from server === p6080_root HTTP/1.1 200 OK Server: WebSockify Python/3.11.2 Date: Wed, 28 Oct 2026 07:40:10 GMT Content-type: text/html Content-Length: 15212 Last-Modified: Fri, 22 Oct 2021 08:40:13 GMT noVNC 上传材料