← Back to observed IPs

EudorIA Threat Observatory

37.49.225.20

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh5 catalogued events

First observation21/08/2026 17:27

Last observation30/08/2026 10:26

Controls areaIPS, WAF

Maximum rule level11/20

Network context

Estimated origin

Country: Netherlands (NL)
City: Amsterdam
ASN: AS61254
ASN operator / holder: ESTOXY-OU - ESTOXY OU, EE
Announced prefix: 37.49.225.0/24
Reverse DNS: PTR record not published

Last activity

IPS detection

Public destination: eudoria.it
Service: HTTP
Rule: 100901
Technical reason: ET WEB_SERVER WebShell Generic - wget http - POST
Outcome: Blocked / detected

Minimised history

Observed evidence

Last 5 publishable events

30/08/2026 10:26

IPS

IPS detection

high

ET WEB_SERVER WebShell Generic - wget http - POST

Destination: eudoria.it
Service: HTTP
Outcome: Detected

25/08/2026 01:22

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 37.49.225.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /
Anomaly score: 43
Outcome: Blocked

25/08/2026 01:22

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 37.49.225.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /
Anomaly score: 38
Outcome: Blocked

21/08/2026 17:27

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 37.49.225.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /
Anomaly score: 43
Outcome: Blocked

21/08/2026 17:27

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 37.49.225.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /
Anomaly score: 38
Outcome: Blocked