// actor profile
20.203.221.142
geo Switzerland · Zurich[CH]asn AS8075 Microsoft Corporationisp Microsoft Corporation
// observed 0h · refreshed 2026-08-25 17:05:54 UTC
Behavior
Stats
Total events
102
SSH events
0
0 failures
Distinct users tried
0
Distinct paths tried
51
51 HTTP 4xx
Observed tactics
Recent activity
// last 25 events · successful exploits filtered| When | Source | Category | Detail | Status | Tags |
|---|---|---|---|---|---|
| 2026-07-29 12:32:58 | http | request | GET /login.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:58 | http | request | GET /login.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:56 | http | request | GET /resp.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:56 | http | request | GET /resp.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:54 | http | request | GET /404.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:54 | http | request | GET /404.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:51 | http | request | GET /elp.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:51 | http | request | GET /elp.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:50 | http | request | GET /item.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:50 | http | request | GET /domvf.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:50 | http | request | GET /item.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:50 | http | request | GET /domvf.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:44 | http | request | GET /echkm.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:44 | http | request | GET /uninstall.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:44 | http | request | GET /uninstall.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:44 | http | request | GET /echkm.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:40 | http | request | GET /wp.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:40 | http | request | GET /wp.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:38 | http | request | GET /about.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:38 | http | request | GET /about.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:36 | http | request | GET /themes.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:36 | http | request | GET /themes.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:32 | http | request | GET /mah.php | 404 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:32 | http | request | GET /mah.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
| 2026-07-29 12:32:27 | http | request | GET /shell.php | 308 | client.empty-uaprotocol.no-acceptprotocol.no-language |
// machine-readable