Threat LevelMEDIUM45/1003 rule types
3 incidents on record · 3 rule types · persistent 35-day campaign · last seen 15d ago
| PTR | N/A |
| Org / ASN | JOY Services |
| Country | 🇮🇳 India |
| City | Mumbai, Maharashtra |
| Timezone | Asia/Kolkata |
Attack Analysis
Backup & Database File Probe
This IP requested a whole-site backup archive (e.g. backup.zip, www.tar.gz) at the domain root — a common attacker shortcut to download an entire site's source code, configuration, and database in one file, skipping the need to exploit anything at all.
Git Repository Exposure Probe
This IP requested the /.git/ directory, attempting to download source code, commit history, database credentials, and API keys from an accidentally exposed Git repository. Automated tools can reconstruct an entire codebase from an exposed .git folder. No legitimate client ever requests this path.
Reports (3)
| Date | Severity | Description |
|---|---|---|
| 15 Sep 2026 - 11:26 | high | Web: Backup/database file probe |
| 15 Sep 2026 - 11:26 | medium | Query Guard — Path Backup Archive Probe |
| 10 Aug 2026 - 23:37 | high | Web: Git repo exposure probe |
EagleEye Intelligence