EudorIA Threat Observatory

121.43.103.50

Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.

Confidencehigh2 catalogued events

First observation14/09/2026 23:17

Last observation16/09/2026 17:01

Controls areaIPS

Maximum rule level12/20

Network context

Estimated origin

Country: China (CN)
City: Hangzhou
ASN: AS37963
ASN operator / holder: ALIBABA-CN-NET - Hangzhou Alibaba Advertising Co.,Ltd., CN
Announced prefix: 121.42.0.0/15
Reverse DNS: PTR record not published

Last activity

Public destination: eudoria.it
Service: UDP porta 9034 (servizio non catalogato)
Rule: 100902
Technical reason: ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Outcome: Blocked / detected

Minimised history

Last 2 publishable events

16/09/2026 17:01

IPS

high

ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)

14/09/2026 23:17

IPS

high

ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)