← Back to observed IPs

EudorIA Threat Observatory

94.154.43.158

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh4 catalogued events

First observation24/08/2026 05:43

Last observation24/09/2026 03:12

Controls areaWAF

Maximum rule level8/20

Network context

Estimated origin

Country: United Kingdom (GB)
City: Amsterdam
ASN: AS219502
ASN operator / holder: STORMCLOUD-AS - Storm Industries LLC, US
Announced prefix: 94.154.43.0/24
Reverse DNS: PTR record not published

Last activity

Exploit attempt

Public destination: eudoria.it
Service: HTTPS protetto da WAF
Rule: 100600
Technical reason: EudorIA WAF blocked a request from 94.154.43.158.
Outcome: Blocked / detected

Minimised history

Observed evidence

Last 4 publishable events

24/09/2026 03:12

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 94.154.43.158.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env
Anomaly score: 5
Outcome: Blocked

10/09/2026 20:06

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 94.154.43.158.

Destination: mail.eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env
Anomaly score: 5
Outcome: Blocked

10/09/2026 03:33

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 94.154.43.158.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.[internal-host]
Anomaly score: 5
Outcome: Blocked

24/08/2026 05:43

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 94.154.43.158.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env
Anomaly score: 5
Outcome: Blocked