Cereal2 · Network
Attacks observed on OVH SAS (AS16276)
Cereal2 attack observations affecting AS16276 OVH SAS: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.
642 observations · Last 30 days · Latest observation
Most affected countries
Last 30 days
Most observed methods
- Raw IPv4/TCP packet flood variant 2268
- Stateful TCP connection and session flood112
- TCP connection and session-pool flood variant 174
- RakNet unconnected-ping flood59
- UDP flood with large datagrams (default 1400-byte payload)40
- Small randomized UDP datagram flood29
- Raw IPv4/TCP packet flood variant 322
- UDP flood with minimal datagrams (default 1-byte payload)20
Last 30 days
Recent observations
- UDP flood with large datagrams (default 1400-byte payload)141.94.3.82/32UDP/801mFrance
- RakNet unconnected-ping flood51.68.160.128/32UDP/301201mGermany
- RakNet unconnected-ping flood137.74.4.207/32UDP/130001mPoland
- RakNet unconnected-ping flood51.68.160.128/32UDP/301201mGermany
- RakNet unconnected-ping flood51.68.160.128/32UDP/301201mGermany
- RakNet unconnected-ping flood51.38.152.32/32UDP/450101mPoland
- TCP connection and session-pool flood variant 151.38.152.32/32TCP/450101mPoland
- Raw IPv4/TCP packet flood variant 251.38.152.32/32TCP/450141mPoland
- RakNet unconnected-ping flood51.68.160.128/32UDP/301201mGermany
- Raw IPv4/TCP packet flood variant 35.39.10.249/32TCP/4431mFrance
- Raw IPv4/TCP packet flood variant 25.39.10.249/32TCP/4431mFrance
- UDP flood with minimal datagrams (default 1-byte payload)57.128.235.0/24UDP/255651mPoland
- TCP connection and session-pool flood variant 151.77.68.117/32TCP/4432mGermany
- TCP connection and session-pool flood variant 151.77.68.117/32TCP/4431mGermany
- UDP flood with minimal datagrams (default 1-byte payload)54.36.237.121/32UDP/99871mGermany
- TCP connection and session-pool flood variant 154.36.237.121/32TCP/90011mGermany
- Raw IPv4/TCP packet flood variant 254.36.237.121/32TCP/90011mGermany
- Raw IPv4/TCP packet flood variant 254.36.237.121/32TCP/90011mGermany
- Raw IPv4/TCP packet flood variant 254.37.78.151/32TCP/301201mGermany
- Raw IPv4/TCP packet flood variant 2135.125.185.148/32TCP/301201mGermany
- Raw IPv4/TCP packet flood variant 294.23.109.16/32TCP/301201mFrance
- UDP flood with minimal datagrams (default 1-byte payload)51.77.65.100/32UDP/270431mGermany
- UDP flood with minimal datagrams (default 1-byte payload)51.77.65.100/32UDP/270431mGermany
- UDP flood with minimal datagrams (default 1-byte payload)51.77.65.100/32UDP/270431mGermany
- Small randomized UDP datagram flood51.77.65.100/32UDP/270431mGermany
- UDP flood with minimal datagrams (default 1-byte payload)51.77.65.100/32UDP/270431mGermany
- RakNet unconnected-ping flood145.239.149.65/32UDP/301201mGermany
- Raw IPv4/TCP packet flood variant 251.195.61.16/32TCP/221mGermany
- Raw IPv4/TCP packet flood variant 251.195.61.16/32TCP/303201mGermany
- Raw IPv4/TCP packet flood variant 251.195.61.16/32TCP/303201mGermany
- UDP flood with large datagrams (default 1400-byte payload)141.95.106.93/32UDP/301201mGermany
- UDP flood with minimal datagrams (default 1-byte payload)144.217.191.137/32UDP/4431mCanada
- TCP connection and session-pool flood variant 1144.217.191.137/32TCP/4431mCanada
- RakNet unconnected-ping flood57.129.84.177/32UDP/90011mGermany
- Raw IPv4/TCP packet flood variant 257.129.84.177/32TCP/90011mGermany
- Raw IPv4/TCP packet flood variant 257.129.84.177/32TCP/90011mGermany
- Raw IPv4/TCP packet flood variant 291.134.70.55/32TCP/90011mFrance
- Raw IPv4/TCP packet flood variant 291.134.70.55/32TCP/90011mFrance
- Raw IPv4/TCP packet flood variant 351.81.101.212/32TCP/12341mUnited States
- UDP flood with large datagrams (default 1400-byte payload)54.37.47.6/32UDP/12341mFrance
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.