← Back to observed IPs

EudorIA Threat Observatory

185.226.197.7

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh2 catalogued events

First observation10/09/2026 07:05

Last observation23/09/2026 05:11

Controls areaIPS, WAF

Maximum rule level10/20

Network context

Estimated origin

Country: Portugal (PT)
City: Location not published by the sources
ASN: AS21859
ASN operator / holder: ZEN-ECN - Zenlayer Inc, US
Announced prefix: 185.226.197.0/24
Reverse DNS: zl-amsc-nl-gp1-wk117a.internet-census.org

Last activity

IPS detection

Public destination: eudoria.it
Service: DNS UDP
Rule: 100901
Technical reason: GPL DNS named version attempt
Outcome: Blocked / detected

Minimised history

Observed evidence

Last 2 publishable events

23/09/2026 05:11

IPS

IPS detection

high

GPL DNS named version attempt

Destination: eudoria.it
Service: DNS UDP
Outcome: Detected

10/09/2026 07:05

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 185.226.197.7.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: POST
Resource: /mcp
Anomaly score: 5
Outcome: Blocked