EudorIA Threat Observatory

91.92.40.149

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh21 catalogued events

First observation11/09/2026 21:02

Last observation11/09/2026 23:15

Controls areaIPS, WAF

Maximum rule level12/20

Network context

Estimated origin

Country: Bulgaria (BG)
City: Amsterdam
ASN: AS197170
ASN operator / holder: TECHTIES-AS - TechTies Inc., SC
Announced prefix: 91.92.40.0/24
Reverse DNS: PTR record not published

Last activity

IPS detection

Public destination: eudoria.it
Service: HTTP
Rule: 100901
Technical reason: ET WEB_SERVER WEB-PHP phpinfo access
Outcome: Blocked / detected

Minimised history

Observed evidence

Last 21 publishable events

11/09/2026 23:15

IPS

IPS detection

high

ET WEB_SERVER WEB-PHP phpinfo access

Destination: eudoria.it
Service: HTTP
Outcome: Detected

11/09/2026 23:09

IPS

IPS detection

high

ET WEB_SERVER WEB-PHP phpinfo access

Destination: eudoria.it
Service: HTTP
Outcome: Detected

11/09/2026 21:08

WAF

Repeated web activity

high

EudorIA WAF blocked repeated requests from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env-config.js
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:08

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env.js
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:08

WAF

Repeated web activity

high

EudorIA WAF blocked repeated requests from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /config/parameters.yml
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:08

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /config/parameters.yml
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:08

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.aws/credentials
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:08

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env-config.js
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:08

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /app/config/parameters.yml
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:08

IPS

IPS detection

high

ET WEB_SERVER WEB-PHP phpinfo access

Destination: eudoria.it
Service: HTTP
Outcome: Detected

11/09/2026 21:07

WAF

Repeated web activity

high

EudorIA WAF blocked repeated requests from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /composer.json
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:07

WAF

Anomalous web request

medium

EudorIA WAF blocked an external request with a high anomaly score from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /web.config
Anomaly score: 10
Outcome: Blocked

11/09/2026 21:07

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /composer.json
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:07

WAF

Blocked web request

medium

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.gitconfig
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:07

WAF

Exploit attempt

high

EudorIA WAF blocked an external request with a high anomaly score from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env.bak
Anomaly score: 10
Outcome: Blocked

11/09/2026 21:02

WAF

Exploit attempt

high

EudorIA WAF blocked repeated requests from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:02

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /wp-config.php
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:02

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.git/config
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:02

IPS

IPS detection

high

ET WEB_SERVER WEB-PHP phpinfo access

Destination: eudoria.it
Service: HTTP
Outcome: Detected

11/09/2026 21:02

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /.env
Anomaly score: 5
Outcome: Blocked

11/09/2026 21:02

WAF

Exploit attempt

high

EudorIA WAF blocked a request from 91.92.40.149.

Destination: eudoria.it
Service: HTTPS protetto da WAF
Method: GET
Resource: /wp-config.php
Anomaly score: 5
Outcome: Blocked