← Back to observed IPs

EudorIA Threat Observatory

54.89.13.172

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh1 catalogued events

First observation11/09/2026 05:05

Last observation11/09/2026 05:05

Controls areaWAF

Maximum rule level8/20

Network context

Estimated origin

Country: United States (US)
City: Ashburn
ASN: AS14618
ASN operator / holder: AMAZON-AES - Amazon.com, Inc., US
Announced prefix: 54.89.0.0/16
Reverse DNS: ec2-54-89-13-172.compute-1.amazonaws.com

Last activity

Exploit attempt

Public destination: eudoria.it
Service: HTTPS protetto da WAF
Rule: 100600
Technical reason: EudorIA WAF blocked a request from 54.89.13.172.
Outcome: Blocked / detected

Minimised history

Observed evidence

Last 1 publishable events

11/09/2026 05:05

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 54.89.13.172.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env
Anomaly score: 5
Outcome: Blocked