// actor profile
20.200.211.114
geo South Korea · Seoul[KR]asn AS8075 Microsoft Corporationisp Microsoft Corporation
// observed 0h · refreshed 2026-10-23 23:58:06 UTC
Behavior
Stats
Total events
166
SSH events
0
0 failures
Distinct users tried
0
Distinct paths tried
84
80 HTTP 4xx
Observed tactics
Recent activity
// last 25 events · successful exploits filtered| When | Source | Category | Detail | Status | Tags |
|---|---|---|---|---|---|
| 2026-10-09 07:19:12 | http | request | GET /1337.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:12 | http | request | GET /1337.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:12 | http | request | GET /h02ugyh.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:12 | http | request | GET /h02ugyh.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:11 | http | request | GET /flm.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:11 | http | request | GET /flm.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:11 | http | request | GET /kk00.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:11 | http | request | GET /kk00.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:10 | http | request | GET /xor.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:10 | http | request | GET /xor.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:10 | http | request | GET /consub.php?p= | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:10 | http | request | GET /consub.php?p= | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:09 | http | request | GET /undailyed.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:09 | http | request | GET /undailyed.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:09 | http | request | GET /environment.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:09 | http | request | GET /environment.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:08 | http | request | GET /ffs.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:08 | http | request | GET /ffs.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:08 | http | request | GET /kon.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:08 | http | request | GET /kon.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:07 | http | request | GET /harhygh.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:07 | http | request | GET /harhygh.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:07 | http | request | GET /wp-content/wp-init.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:07 | http | request | GET /wp-content/wp-init.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-10-09 07:19:06 | http | request | GET /xie.php?p= | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
// machine-readable