142.93.143.8
Technical source observed on EudorIA perimeter controls. All the events listed were blocked, contained or detected by the defensive systems.
Estimated origin
- Country
- Netherlands (NL)
- City
- Amsterdam
- ASN
- AS14061
- ASN operator / holder
- DIGITALOCEAN-ASN - DigitalOcean, LLC, US
- Announced prefix
- 142.93.128.0/20
- Reverse DNS
- a4ac419f3c.scan.leakix.org
Contained session
- Public destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Rule
- 100612
- Technical reason
- OPNsense terminated PF states for WAF MISP source 142.93.143.8.
- Outcome
- Blocked / detected
Observed evidence
Contained session
highOPNsense terminated PF states for WAF MISP source 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Outcome
- Contained
Known IOC
highWAF source IP confirmed in the local IOC list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Outcome
- Blocked
Known IOC
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- GET
- Resource
/trace.axd- Anomaly score
- 5
- Outcome
- Blocked
Known IOC
highWAF source IP confirmed in the local IOC list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Outcome
- Blocked
Known IOC
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- POST
- Resource
/api/gql- Anomaly score
- 5
- Outcome
- Blocked
Known IOC
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- POST
- Resource
/graphql/api- Anomaly score
- 5
- Outcome
- Blocked
Known IOC
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- POST
- Resource
/api/graphql- Anomaly score
- 5
- Outcome
- Blocked
Known IOC
highWAF source IP confirmed in the local IOC list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Outcome
- Blocked
Known IOC
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- POST
- Resource
/api- Anomaly score
- 5
- Outcome
- Blocked
Known IOC
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- POST
- Resource
/graphql- Anomaly score
- 5
- Outcome
- Blocked
Exploit attempt
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- GET
- Resource
/.git/config- Anomaly score
- 5
- Outcome
- Blocked
IPS detection
highET EXPLOIT GraphQL Introspection Query Attempt
- Destination
- eudoria.it
- Service
- HTTP
- Outcome
- Detected
Contained session
highOPNsense terminated PF states for WAF MISP source 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Outcome
- Contained
Exploit attempt
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- GET
- Resource
/.env- Anomaly score
- 5
- Outcome
- Blocked
Known IOC
highWAF source IP confirmed in the local IOC list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Outcome
- Blocked
Known IOC
highEudorIA WAF blocked an IP present in the local threat-intelligence list: 142.93.143.8.
- Destination
- eudoria.it
- Service
- HTTPS protetto da WAF
- Method
- GET
- Resource
/.DS_Store- Anomaly score
- 5
- Outcome
- Blocked