All families · Country
Attacks observed in Russia
All families attack observations affecting networks in Russia: targeted prefixes, affected operators, attack methods, and timing over the last 30 days.
280 observations · Last 30 days · Latest observation
Most affected networks
- Aleksandr Shmalko trading as PR Obrada Podataka Castles Novi SadAS21483372
- DDOS-GUARD LTDAS5772430
- Yandex.Cloud LLCAS20035028
- Storm Networks LLCAS4329824
- Castles LLCAS4327817
- Iskratelecom JSCAS2912416
- Global Network Management IncAS3150011
- PJSC RostelecomAS123899
Last 30 days
Most observed methods
- Potassium: UDP datagram flood, variant 798
- Potassium: TCP connection flood63
- Cereal2: TCP connection and session-pool flood variant 120
- Cereal2: Small randomized UDP datagram flood17
- Cereal2: Raw IPv4/TCP packet flood variant 116
- Cereal2: RakNet unconnected-ping flood12
- Cereal2: UDP flood with large datagrams (default 1400-byte payload)12
- Tadashi: UDP datagram flood9
Last 30 days
Recent observations
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: UDP datagram flood, variant 791.214.142.0/24UDP/390171mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Cereal2: RakNet unconnected-ping flood95.129.234.29/32UDP/255651mRussia
- Cereal2: Small randomized UDP datagram flood95.129.234.29/32UDP/255651mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Cereal2: RakNet unconnected-ping flood95.129.234.29/32UDP/255651mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Cereal2: RakNet unconnected-ping flood95.129.234.81/32UDP/255651mRussia
- Cereal2: RakNet unconnected-ping flood95.129.234.81/32UDP/255651mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
- Potassium: TCP connection flood80.242.59.61/32TCP/255652mRussia
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.