Cereal2 · Country
Attacks observed in United States
Cereal2 attack observations affecting networks in United States: targeted prefixes, affected operators, attack methods, and timing over the last 30 days.
3000+ observations · Last 30 days · Latest observation
Most affected networks
- NetLab GlobalAS9791863
- Uscloud IncAS402169621
- Infraly, LLCAS40052982
- Cloudflare London, LLCAS20924269
- Interserver, IncAS1931849
- FranTech SolutionsAS5366732
- Amazon.com, Inc.AS1650931
- Root NetworksAS3270823
Last 30 days
Most observed methods
- TCP connection and session-pool flood variant 12550
- UDP flood with large datagrams (default 1400-byte payload)156
- Configurable custom-payload UDP flood84
- Nonblocking TCP connection and session-pool flood60
- Stateful TCP connection and session flood35
- Small randomized UDP datagram flood31
- UDP flood with minimal datagrams (default 1-byte payload)31
- Raw IPv4/TCP packet flood variant 231
Last 30 days
Shares are counted over the 3000 most recent observations, not the full 30 days.
Recent observations
- Small randomized UDP datagram flood15.129.64.58/32UDP/280151mUnited States
- Configurable custom-payload UDP flood15.129.64.58/32UDP/280151mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- UDP flood with large datagrams (default 1400-byte payload)38.211.252.0/24UDP/558301mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)87.192.36.0/24UDP/RANDOM1mUnited States
- TCP connection and session-pool flood variant 115.197.79.148/32TCP/200001mUnited States
- TCP connection and session-pool flood variant 115.197.79.148/32TCP/200001mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)15.197.79.148/32UDP/200001mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)159.26.85.238/32UDP/531mUnited States
- UDP flood with large datagrams (default 1400-byte payload)152.236.23.38/32UDP/531mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)87.192.38.0/24UDP/RANDOM1mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 1172.65.190.166/32TCP/301201mUnited States
- Stateful TCP connection and session flood172.65.190.166/32TCP/301201mUnited States
- RakNet unconnected-ping flood172.65.190.166/32UDP/301201mUnited States
- UDP flood with large datagrams (default 1400-byte payload)38.211.252.0/24UDP/167191mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)87.192.37.0/24UDP/RANDOM1mUnited States
- TCP connection and session-pool flood variant 123.224.230.107/32TCP/801mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)87.192.38.0/24UDP/801mUnited States
- UDP flood with large datagrams (default 1400-byte payload)38.211.252.0/24UDP/555421mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)87.192.38.0/24UDP/801mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)87.192.38.0/24UDP/801mUnited States
- UDP flood with large datagrams (default 1400-byte payload)73.237.159.0/24UDP/801mUnited States
- UDP flood with large datagrams (default 1400-byte payload)108.54.70.0/24UDP/801mUnited States
- Stateful TCP connection and session flood38.248.23.84/32TCP/221mUnited States
- TCP connection and session-pool flood variant 1152.236.39.20/32TCP/221mUnited States
- Nonblocking TCP connection and session-pool flood152.236.39.20/32TCP/221mUnited States
- UDP flood with minimal datagrams (default 1-byte payload)107.149.138.137/32UDP/4431mUnited States
- Small randomized UDP datagram flood96.126.188.14/32UDP/301201mUnited States
- TCP connection and session-pool flood variant 196.126.188.14/32TCP/301201mUnited States
- TCP connection and session-pool flood variant 196.126.188.14/32TCP/301201mUnited States
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.