EudorIA Threat Observatory

161.248.239.20

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh56 catalogued events

First observation06/09/2026 22:44

Last observation06/09/2026 22:44

Controls areaIPS, WAF

Maximum rule level12/20

Network context

Estimated origin

Country: VN
City: Location not published by the sources
ASN: AS150895
ASN operator / holder: EZTECH-VN - EZ TECHNOLOGY COMPANY LIMITED, VN
Announced prefix: 161.248.238.0/23
Reverse DNS: PTR record not published

Last activity

Anomalous web request

Public destination: eudoria.it
Service: HTTPS protetto da WAF
Rule: 100604
Technical reason: EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.
Targeted vulnerability: CVE-2018-20062, CVE-2017-9841
Outcome: Blocked / detected

Minimised history

Observed evidence

Last 56 publishable events

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /index.php
Anomaly score: 20
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Resource: /index.php
Anomaly score: 35
Outcome: Blocked

06/09/2026 22:44

WAF

Repeated web activity

high

EudorIA WAF blocked repeated requests from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Resource: /index.php
Anomaly score: 35
Outcome: Blocked

06/09/2026 22:44

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /public/index.php
Vulnerability: CVE-2018-20062
Anomaly score: 5
Outcome: Blocked

06/09/2026 22:44

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /index.php
Vulnerability: CVE-2018-20062
Anomaly score: 5
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /lib/phpunit/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /lib/phpunit/src/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /lib/phpunit/phpunit/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /phpunit/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /phpunit/src/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /phpunit/phpunit/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /phpunit/phpunit/src/Util/PHP/eval-stdin.php
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /vendor/phpunit/phpunit/LICENSE/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /vendor/phpunit/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /vendor/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Vulnerability: CVE-2017-9841
Anomaly score: 10
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /index.php
Anomaly score: 25
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /test.hello
Anomaly score: 25
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /index.php
Anomaly score: 25
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /
Anomaly score: 25
Outcome: Blocked

06/09/2026 22:44

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 161.248.239.20.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /hello.world
Anomaly score: 33
Outcome: Blocked

06/09/2026 22:44

IPS

IPS detection

high

ET WEB_SERVER Possible SQL Injection (exec) in HTTP Request Body

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET WEB_SERVER Generic PHP Remote File Include

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET WEB_SERVER auto_prepend_file PHP config option in uri

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET WEB_SERVER PHP.//Input in HTTP POST

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET WEB_SERVER allow_url_include PHP config option in uri

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET WEB_SERVER PHP tags in HTTP POST

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET EXPLOIT Apache HTTP Server - Path Traversal Attempt (CVE-2021-42013) M2

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt

Destination: eudoria.it
Service: HTTP
Outcome: Detected

06/09/2026 22:44

IPS

IPS detection

high

ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2

Destination: eudoria.it
Service: HTTP
Outcome: Detected