Cereal2 · Network

Attacks observed on AR TELECOM PROVEDOR DE INTERNET LTDA (AS28154)

Cereal2 attack observations affecting AS28154 AR TELECOM PROVEDOR DE INTERNET LTDA: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.

28 observations · Last 30 days · Latest observation 2026-09-10 23:10:51 UTC

Most affected countries

Brazil28

Most observed methods

Configurable custom-payload UDP flood22
Small randomized UDP datagram flood6

Recent observations

2026-09-10 23:10:51 UTCSmall randomized UDP datagram flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-10 22:22:50 UTCSmall randomized UDP datagram flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-10 04:58:09 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-10 04:56:09 UTCConfigurable custom-payload UDP flood187.49.217.0/24UDP/RANDOM1mBrazil
2026-09-10 02:56:08 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-09 17:02:04 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-09 17:00:04 UTCConfigurable custom-payload UDP flood187.49.217.0/24UDP/RANDOM1mBrazil
2026-09-09 16:42:04 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-09 00:01:53 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 16:09:44 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 16:07:49 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 15:21:49 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 14:49:49 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 13:37:48 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 12:53:48 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 09:41:47 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 08:41:46 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 07:23:46 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-08 07:21:46 UTCConfigurable custom-payload UDP flood187.49.217.0/24UDP/RANDOM1mBrazil
2026-09-08 07:19:46 UTCConfigurable custom-payload UDP flood187.49.216.0/24UDP/RANDOM1mBrazil
2026-09-08 05:59:45 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-06 17:32:44 UTCConfigurable custom-payload UDP flood187.49.219.0/24UDP/RANDOM1mBrazil
2026-09-06 17:30:42 UTCConfigurable custom-payload UDP flood187.49.216.0/24UDP/RANDOM1mBrazil
2026-09-06 17:30:42 UTCConfigurable custom-payload UDP flood187.49.217.0/24UDP/RANDOM1mBrazil
2026-09-04 04:39:46 UTCSmall randomized UDP datagram flood177.54.72.0/21UDP/RANDOM1mBrazil
2026-09-04 04:39:46 UTCSmall randomized UDP datagram flood177.54.66.0/24UDP/RANDOM1mBrazil
2026-09-04 04:39:46 UTCSmall randomized UDP datagram flood177.54.64.0/21UDP/RANDOM1mBrazil
2026-09-04 04:39:46 UTCSmall randomized UDP datagram flood177.54.67.0/24UDP/RANDOM1mBrazil

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.