EudorIA Cyber Intelligence
← Back to observed IPs
EudorIA Threat Observatory

49.143.129.24

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh2 catalogued events
First observation25/09/2026 10:38
Last observation25/09/2026 10:38
Controls areaIPS, WAF
Maximum rule level11/20
Network context

Estimated origin

Country
Korea, Republic of (KR)
City
Nonsan
ASN
AS38684
ASN operator / holder
CMBDAEJEON-AS-KR-KR - CMB Daejeon Broadcasting Co,.Ltd, KR
Announced prefix
49.143.128.0/18
Reverse DNS
PTR record not published
Last activity

Exploit attempt

Public destination
eudoria.it
Service
HTTPS protetto da WAF
Rule
100604
Technical reason
EudorIA WAF blocked an external request with a high anomaly score from 49.143.129.24.
Outcome
Blocked / detected
Minimised history

Observed evidence

Last 2 publishable events
25/09/2026 10:38
WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 49.143.129.24.

Destination
eudoria.it
Service
HTTPS protetto da WAF
Method
POST
Resource
/cgi-bin/ViewLog.asp
Anomaly score
23
Outcome
Blocked
25/09/2026 10:38
IPS

IPS detection

high

ET WEB_SERVER WebShell Generic - wget http - POST

Destination
eudoria.it
Service
HTTP
Outcome
Detected