Sarbot · Country

Attacks observed in Germany

Sarbot attack observations affecting networks in Germany: targeted prefixes, affected operators, attack methods, and timing over the last 30 days.

42 observations · Last 30 days · Latest observation 2026-10-20 08:37:49 UTC

Most affected networks

Johannes Gutenberg-Universitaet MainzAS285720
Michael Sebastian Schinzel trading as IP-Projects GmbH & Co. KGAS483145
Ferdinand Zink trading as Tube-HostingAS495815
Amazon.com, Inc.AS165094
QONZER LTDAS2006604
1&1 Versatel GmbHAS88812
Cloudflare, Inc.AS133351
Cyberse GmbH & Co. KGAS2082081

Most observed methods

Connected UDP payloads36
TLS HTTP/2 requests2
TLS HTTP request variants2
ICMP requests1
TCP ACK payloads1

Recent observations

2026-10-20 08:37:49 UTCConnected UDP payloads134.93.172.0/32UDP/RANDOM1mGermany
2026-10-20 08:36:49 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 08:36:09 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM30sGermany
2026-10-20 08:35:39 UTCConnected UDP payloads134.93.172.232/32UDP/RANDOM30sGermany
2026-10-20 08:34:39 UTCConnected UDP payloads134.93.172.0/32UDP/RANDOM1mGermany
2026-10-20 08:33:38 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 08:32:32 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 08:07:32 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 07:40:39 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 07:36:27 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 07:34:39 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 07:09:22 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 07:05:27 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 07:03:36 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 07:02:29 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 06:47:11 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 06:33:28 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 06:26:55 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 06:22:07 UTCConnected UDP payloads134.93.172.0/24UDP/RANDOM1mGermany
2026-10-20 06:19:09 UTCConnected UDP payloads134.93.172.232/32UDP/801mGermany
2026-10-20 02:42:55 UTCConnected UDP payloads13.32.121.67/32UDP/RANDOM40sGermany
2026-10-20 02:42:55 UTCConnected UDP payloads13.32.121.95/32UDP/RANDOM40sGermany
2026-10-20 02:42:55 UTCConnected UDP payloads13.32.121.127/32UDP/RANDOM40sGermany
2026-10-20 02:42:55 UTCConnected UDP payloads13.32.121.40/32UDP/RANDOM40sGermany
2026-10-19 19:01:46 UTCConnected UDP payloads104.29.158.4/32UDP/1933810sGermany
2026-10-19 17:11:52 UTCConnected UDP payloads94.199.215.95/32UDP/270151mGermany
2026-10-19 17:10:29 UTCConnected UDP payloads94.199.215.95/32UDP/270151mGermany
2026-10-19 17:08:10 UTCConnected UDP payloads94.199.215.95/32UDP/270151mGermany
2026-10-19 17:06:52 UTCConnected UDP payloads94.199.215.95/32UDP/270151mGermany
2026-10-19 17:06:11 UTCConnected UDP payloads94.199.215.95/32UDP/270151mGermany
2026-10-19 15:36:34 UTCConnected UDP payloads95.135.1.200/32UDP/270151mGermany
2026-10-19 14:45:49 UTCConnected UDP payloads89.245.152.130/32UDP/RANDOM30sGermany
2026-10-19 14:45:00 UTCICMP requests89.245.152.0/24ICMP30sGermany
2026-10-19 12:56:19 UTCTCP ACK payloads95.135.1.200/32TCP/221mGermany
2026-10-19 12:40:52 UTCConnected UDP payloads95.135.1.200/32UDP/270152mGermany
2026-10-19 12:01:45 UTCConnected UDP payloads95.135.1.200/32UDP/270151mGermany
2026-10-17 01:20:14 UTCTLS HTTP/2 requests185.240.240.20/32HTTPS/4431mGermany
2026-10-17 01:03:21 UTCConnected UDP payloads193.141.60.150/32UDP/RANDOM30sGermany
2026-10-17 00:59:53 UTCConnected UDP payloads193.141.60.150/32UDP/RANDOM30sGermany
2026-10-17 00:58:15 UTCTLS HTTP request variants193.141.60.150/32HTTPS/44330sGermany

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.