Cereal2 · Network

Attacks observed on ESTADO DO MARANHAO - SEGOV (AS265994)

Cereal2 attack observations affecting AS265994 ESTADO DO MARANHAO - SEGOV: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.

21 observations · Last 30 days · Latest observation 2026-09-10 02:46:08 UTC

Most affected countries

Brazil21

Most observed methods

Configurable custom-payload UDP flood19
Small randomized UDP datagram flood1
UDP flood with large datagrams (default 1400-byte payload)1

Recent observations

2026-09-10 02:46:08 UTCConfigurable custom-payload UDP flood181.191.89.0/24UDP/RANDOM1mBrazil
2026-09-09 23:26:07 UTCConfigurable custom-payload UDP flood181.191.89.0/24UDP/RANDOM1mBrazil
2026-09-08 17:29:50 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 14:31:49 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 14:31:28 UTCConfigurable custom-payload UDP flood181.191.88.0/23UDP/RANDOM1mBrazil
2026-09-08 14:29:48 UTCConfigurable custom-payload UDP flood181.191.88.0/23UDP/RANDOM1mBrazil
2026-09-08 13:43:48 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 11:33:47 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 06:27:45 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 04:51:45 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 04:07:44 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 04:05:44 UTCConfigurable custom-payload UDP flood181.191.88.0/23UDP/RANDOM1mBrazil
2026-09-08 01:32:28 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-08 01:30:28 UTCConfigurable custom-payload UDP flood181.191.88.0/23UDP/RANDOM1mBrazil
2026-09-06 17:26:39 UTCConfigurable custom-payload UDP flood181.191.90.0/23UDP/RANDOM1mBrazil
2026-09-06 17:26:39 UTCConfigurable custom-payload UDP flood181.191.88.0/23UDP/RANDOM1mBrazil
2026-09-06 17:26:39 UTCConfigurable custom-payload UDP flood181.191.88.0/22UDP/RANDOM1mBrazil
2026-09-03 20:28:01 UTCConfigurable custom-payload UDP flood181.191.91.0/24UDP/RANDOM1mBrazil
2026-09-03 16:42:17 UTCConfigurable custom-payload UDP flood181.191.89.0/24UDP/RANDOM1mBrazil
2026-09-03 05:57:38 UTCSmall randomized UDP datagram flood181.191.89.0/24UDP/RANDOM1mBrazil
2026-09-03 01:59:11 UTCUDP flood with large datagrams (default 1400-byte payload)181.191.88.0/23UDP/RANDOM1mBrazil

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.