Threat LevelHIGH62/1003 rule types across 3 attack categories
3 incidents on record · 3 rule types · active attack detected · last seen 20d ago
| PTR | 157-157-221-34.dsl.dynamic.simnet.is |
| Org / ASN | AS6677 Mila hf |
| Country | 🇮🇸 Iceland |
| City | Reykjavik, Capital Region |
| Timezone | Atlantic/Reykjavik |
Attack Analysis
Geo-Blocked Country
This IP was blocked purely based on its country of origin — the site owner has restricted access from this IP's geographic location due to a pattern of unwanted traffic from that region. This does not necessarily mean the specific IP itself has attacked anything; it reflects a blanket country-level policy.
Git Repository Exposure Probe
This IP requested the /.git/ directory, attempting to download source code, commit history, database credentials, and API keys from an accidentally exposed Git repository. Automated tools can reconstruct an entire codebase from an exposed .git folder. No legitimate client ever requests this path.
Webshell Upload Scan
This IP rapidly probed multiple non-existent PHP paths in under 60 seconds — a hallmark of automated webshell scanning tools hunting for previously uploaded backdoors or vulnerable file-upload endpoints. If successful, a webshell grants the attacker full remote code execution on the server.
Reports (3)
| Date | Severity | Description |
|---|---|---|
| 9 Sep 2026 - 22:38 | high | Web: Webshell scan — 3+ unknown PHP probes in 60s |
| 9 Sep 2026 - 22:38 | high | Web: Git repo exposure probe |
| 9 Sep 2026 - 22:37 | low | Geo Blocker — Country Match |
EagleEye Intelligence