← Back to observed IPs
EudorIA Threat Observatory

54.197.189.103

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh1 catalogued events
First observation14/09/2026 22:29
Last observation14/09/2026 22:29
Controls areaIPS
Maximum rule level12/20
Network context

Estimated origin

Country
United States (US)
City
Ashburn
ASN
AS14618
ASN operator / holder
AMAZON-AES - Amazon.com, Inc., US
Announced prefix
54.196.0.0/15
Reverse DNS
ec2-54-197-189-103.compute-1.amazonaws.com
Last activity

IPS detection

Public destination
eudoria.it
Service
UDP porta 9034 (servizio non catalogato)
Rule
100902
Technical reason
ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Outcome
Blocked / detected
Minimised history

Observed evidence

Last 1 publishable events
14/09/2026 22:29
IPS

IPS detection

high

ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)

Destination
eudoria.it
Service
UDP porta 9034 (servizio non catalogato)
Outcome
Detected