EudorIA Threat Observatory

94.190.104.223

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh1 catalogued events

First observation11/09/2026 00:00

Last observation11/09/2026 00:00

Controls areaIPS

Maximum rule level12/20

Network context

Estimated origin

Country: Russian Federation (RU)
City: Polevskoy
ASN: AS48524
ASN operator / holder: INTERRA-AS - INTERRA telecommunications group, Ltd., RU
Announced prefix: 94.190.96.0/20
Reverse DNS: 223.104.190.94.kch.ru

Last activity

Public destination: eudoria.it
Service: UDP porta 9034 (servizio non catalogato)
Rule: 100902
Technical reason: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Outcome: Blocked / detected

Minimised history

Last 1 publishable events

11/09/2026 00:00

IPS

high

ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)