← Back to observed IPs

EudorIA Threat Observatory

85.217.140.52

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh1 catalogued events

First observation11/09/2026 08:44

Last observation11/09/2026 08:44

Controls areaIPS

Maximum rule level10/20

Network context

Estimated origin

Country: Bulgaria (BG)
City: Gravelines
ASN: AS209334
ASN operator / holder: MODAT-01 - Modat B.V., NL
Announced prefix: 85.217.140.0/24
Reverse DNS: o351.scanner.modat.io

Last activity

IPS detection

Public destination: eudoria.it
Service: DNS UDP
Rule: 100901
Technical reason: GPL DNS named version attempt
Outcome: Blocked / detected

Minimised history

Observed evidence

Last 1 publishable events

11/09/2026 08:44

IPS

IPS detection

high

GPL DNS named version attempt

Destination: eudoria.it
Service: DNS UDP
Outcome: Detected