Cereal2 · Country
Attacks observed in United Kingdom
Cereal2 attack observations affecting networks in United Kingdom: targeted prefixes, affected operators, attack methods, and timing over the last 30 days.
187 observations · Last 30 days · Latest observation
Most affected networks
- EUGAMEHOST LTDAS20375841
- OVH SASAS1627637
- DINGLU CO., LIMITEDAS21351632
- PCCW Global (HK) Ltd.AS349117
- PebbleHost LtdAS21202716
- Tempest Hosting, LLCAS3623112
- Cloudflare, Inc.AS133356
- GCI Network Solutions LimitedAS88515
Last 30 days
Most observed methods
- TCP connection and session-pool flood variant 147
- UDP flood with large datagrams (default 1400-byte payload)36
- Small randomized UDP datagram flood26
- Stateful TCP connection and session flood25
- UDP flood with minimal datagrams (default 1-byte payload)19
- Raw IPv4/TCP packet flood variant 219
- Raw IPv4/TCP packet flood variant 310
- RakNet unconnected-ping flood2
Last 30 days
Recent observations
- RakNet unconnected-ping flood128.116.31.33/32UDP/575881mUnited Kingdom
- Small randomized UDP datagram flood185.206.149.197/32UDP/RANDOM3m 20sUnited Kingdom
- Small randomized UDP datagram flood185.206.149.196/32UDP/RANDOM3m 20sUnited Kingdom
- Small randomized UDP datagram flood185.83.152.136/32UDP/RANDOM3m 20sUnited Kingdom
- Small randomized UDP datagram flood185.83.154.112/32UDP/RANDOM3m 20sUnited Kingdom
- Small randomized UDP datagram flood194.164.96.251/32UDP/RANDOM3m 20sUnited Kingdom
- Small randomized UDP datagram flood185.206.148.205/32UDP/RANDOM3m 20sUnited Kingdom
- Small randomized UDP datagram flood194.213.3.38/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)185.206.149.197/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)185.206.149.196/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)185.83.152.136/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)185.83.154.112/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)185.206.148.205/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)194.213.3.38/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)194.164.96.251/32UDP/RANDOM3m 20sUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)63.220.67.28/32UDP/531mUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)63.220.67.28/32UDP/531mUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)63.220.67.28/32UDP/531mUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)63.220.67.28/32UDP/531mUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)23.247.169.133/32UDP/99871mUnited Kingdom
- Raw IPv4/TCP packet flood variant 3109.176.229.0/24TCP/615251mUnited Kingdom
- Raw IPv4/TCP packet flood variant 3109.176.229.22/32TCP/615251mUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)109.176.229.22/32UDP/615251mUnited Kingdom
- Raw IPv4/TCP packet flood variant 323.247.169.131/32TCP/616101mUnited Kingdom
- UDP flood with large datagrams (default 1400-byte payload)23.247.169.131/32UDP/616391mUnited Kingdom
- Stateful TCP connection and session flood51.38.84.60/32TCP/44320sUnited Kingdom
- Stateful TCP connection and session flood51.38.84.60/32TCP/44310sUnited Kingdom
- TCP connection and session-pool flood variant 151.38.84.60/32TCP/44310sUnited Kingdom
- Raw IPv4/TCP packet flood variant 3103.175.129.192/32TCP/801mUnited Kingdom
- Raw IPv4/TCP packet flood variant 3103.175.129.3/32TCP/801mUnited Kingdom
- Raw IPv4/TCP packet flood variant 3103.175.129.66/32TCP/801mUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)103.175.129.66/32UDP/801mUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)103.175.129.192/32UDP/801mUnited Kingdom
- UDP flood with minimal datagrams (default 1-byte payload)103.175.129.3/32UDP/801mUnited Kingdom
- TCP connection and session-pool flood variant 1103.175.129.3/32TCP/801mUnited Kingdom
- TCP connection and session-pool flood variant 1103.175.129.192/32TCP/801mUnited Kingdom
- TCP connection and session-pool flood variant 1103.175.129.66/32TCP/801mUnited Kingdom
- TCP connection and session-pool flood variant 1103.175.129.192/32TCP/801mUnited Kingdom
- TCP connection and session-pool flood variant 1103.175.129.66/32TCP/801mUnited Kingdom
- TCP connection and session-pool flood variant 1103.175.129.3/32TCP/801mUnited Kingdom
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.