Cereal2 · Network

Attacks observed on Xiamen (AS133775)

Cereal2 attack observations affecting AS133775 Xiamen: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.

45 observations · Last 30 days · Latest observation 2026-09-29 13:28:27 UTC

Most affected countries

China45

Most observed methods

Raw IPv4/TCP packet flood variant 241
Small randomized UDP datagram flood1
TCP connection and session-pool flood variant 11
Raw IPv4/TCP packet flood variant 31
UDP flood with large datagrams (default 1400-byte payload)1

Recent observations

2026-09-29 13:28:27 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-25 11:19:16 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-22 11:21:01 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-21 06:54:16 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-20 12:19:55 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-18 22:13:09 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-18 15:04:12 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-17 22:36:38 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-17 14:51:12 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-17 07:59:32 UTCRaw IPv4/TCP packet flood variant 2101.251.166.36/32TCP/801mChina
2026-09-17 07:57:31 UTCRaw IPv4/TCP packet flood variant 2101.251.166.36/32TCP/801mChina
2026-09-17 07:52:31 UTCSmall randomized UDP datagram flood101.251.166.36/32UDP/801mChina
2026-09-17 07:50:28 UTCRaw IPv4/TCP packet flood variant 2101.251.166.36/32TCP/801mChina
2026-09-17 03:02:17 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-16 09:50:14 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-15 21:07:22 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-15 12:13:09 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-15 08:15:16 UTCRaw IPv4/TCP packet flood variant 2180.188.41.29/32TCP/83441mChina
2026-09-15 07:09:38 UTCRaw IPv4/TCP packet flood variant 245.251.9.51/32TCP/153951mChina
2026-09-14 23:59:30 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-14 17:11:36 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-14 05:34:33 UTCRaw IPv4/TCP packet flood variant 2101.251.176.11/32TCP/221mChina
2026-09-14 05:26:32 UTCRaw IPv4/TCP packet flood variant 2101.251.162.69/32TCP/221mChina
2026-09-13 15:27:52 UTCRaw IPv4/TCP packet flood variant 245.251.8.39/32TCP/80881mChina
2026-09-13 15:06:01 UTCRaw IPv4/TCP packet flood variant 245.251.8.39/32TCP/80881mChina
2026-09-13 07:08:22 UTCRaw IPv4/TCP packet flood variant 245.251.8.39/32TCP/88081mChina
2026-09-12 00:41:40 UTCRaw IPv4/TCP packet flood variant 2101.251.162.69/32TCP/221mChina
2026-09-11 05:35:18 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-11 02:43:53 UTCRaw IPv4/TCP packet flood variant 2101.251.162.69/32TCP/221mChina
2026-09-11 02:37:53 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 22:14:36 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 15:40:54 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 15:34:54 UTCRaw IPv4/TCP packet flood variant 2101.251.162.69/32TCP/221mChina
2026-09-10 15:12:53 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 11:44:14 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 11:09:49 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 10:49:49 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 10:32:05 UTCRaw IPv4/TCP packet flood variant 2101.251.179.24/32TCP/221mChina
2026-09-10 10:09:23 UTCRaw IPv4/TCP packet flood variant 2101.251.162.69/32TCP/221mChina
2026-09-10 09:59:23 UTCTCP connection and session-pool flood variant 1101.251.162.69/32TCP/221mChina

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.