EudorIA Threat Observatory

118.196.28.46

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh1 catalogued events

First observation09/09/2026 23:16

Last observation09/09/2026 23:16

Controls areaIPS

Maximum rule level12/20

Network context

Estimated origin

Country: China (CN)
City: Location not published by the sources
ASN: AS137718
ASN operator / holder: VOLCANO-ENGINE - Beijing Volcano Engine Technology Co., Ltd., CN
Announced prefix: 118.196.16.0/20
Reverse DNS: PTR record not published

Last activity

Public destination: eudoria.it
Service: UDP porta 9034 (servizio non catalogato)
Rule: 100902
Technical reason: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Outcome: Blocked / detected

Minimised history

Last 1 publishable events

09/09/2026 23:16

IPS

high

ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)