Brotherline AnonSec • Shell
SRV 162.240.68.55 YOU 216.73.216.232 USER tywatomy (1003) 7.4.33 DOMAINS 6 Domains
MySQL cURL WGET Perl Python Sudo
Disabled: exec,passthru,shell_exec,system  •  OS: Linux server.ariapress.org 3.10.0-1160.119.1.el7.tuxcare.els22.x86_64 #1 SMP Mon Aug 18 06:07:12 UTC 2025 x86_64  •  Webserver: Apache
/home/tywatomy/access-logs/webmail.ariapress.org-ssl_log
103.253.24.124 - - [01/Aug/2026:07:46:07 -0600] "GET / HTTP/1.1" 403 - "-" "wp2shell-rce/1.0"
103.253.24.124 - - [01/Aug/2026:07:46:08 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 - "-" "wp2shell-rce/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.local HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.save HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.backup HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.old HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.dev HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.example HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.prod HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.production HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env.bak HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.40.107.224 - - [01/Aug/2026:08:13:15 -0600] "GET /.env HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.dev HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.local HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.old HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.save HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.backup HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.example HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.prod HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.bak HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.146.44.58 - - [01/Aug/2026:09:45:25 -0600] "GET /.env.production HTTP/1.1" 403 - "-" "crusader-worker/1.0"
34.41.159.88 - - [01/Aug/2026:09:57:28 -0600] "GET /.git/config HTTP/1.1" 403 - "-" "-"
94.154.43.179 - - [01/Aug/2026:10:56:49 -0600] "GET /.env HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
104.196.21.156 - - [01/Aug/2026:13:07:00 -0600] "GET /.git/config HTTP/1.1" 403 - "-" "-"
94.154.43.184 - - [01/Aug/2026:20:21:04 -0600] "GET / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
192.175.111.228 - - [02/Aug/2026:01:25:17 -0600] "GET / HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
Anon7 — 2022  •  AnonSec Team