Cereal2 路 Network
Attacks observed on haoxiangyun (AS141718)
Cereal2 attack observations affecting AS141718 haoxiangyun: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.
18 observations 路 Last 30 days 路 Latest observation
Most affected countries
Last 30 days
Most observed methods
- TCP connection and session-pool flood variant 16
- UDP flood with minimal datagrams (default 1-byte payload)3
- Raw IPv4/TCP packet flood variant 23
- Raw IPv4/TCP packet flood variant 32
- UDP flood with large datagrams (default 1400-byte payload)2
- Stateful TCP connection and session flood1
- Configurable custom-payload UDP flood1
Last 30 days
Recent observations
- Raw IPv4/TCP packet flood variant 3103.209.129.0/24TCP/801mSweden
- UDP flood with minimal datagrams (default 1-byte payload)103.209.129.0/24UDP/801mSweden
- UDP flood with minimal datagrams (default 1-byte payload)103.209.129.100/32UDP/801mSweden
- UDP flood with large datagrams (default 1400-byte payload)103.209.129.100/32UDP/801mSweden
- TCP connection and session-pool flood variant 1103.209.129.100/32TCP/801mSweden
- Raw IPv4/TCP packet flood variant 2103.209.129.0/24TCP/801mSweden
- Raw IPv4/TCP packet flood variant 3103.209.129.0/24TCP/801mSweden
- UDP flood with minimal datagrams (default 1-byte payload)103.209.129.0/24UDP/801mSweden
- TCP connection and session-pool flood variant 1103.209.129.0/24TCP/801mSweden
- TCP connection and session-pool flood variant 1103.209.129.0/24TCP/801mSweden
- TCP connection and session-pool flood variant 1103.209.129.0/24TCP/801mSweden
- TCP connection and session-pool flood variant 1103.209.129.0/24TCP/801mSweden
- TCP connection and session-pool flood variant 1103.209.129.0/24TCP/8030sSweden
- Stateful TCP connection and session flood103.209.129.0/24TCP/8030sSweden
- Raw IPv4/TCP packet flood variant 2103.209.129.0/24TCP/8030sSweden
- Configurable custom-payload UDP flood103.209.129.0/24UDP/RANDOM1mSweden
- Raw IPv4/TCP packet flood variant 2103.209.129.0/24TCP/801mSweden
- UDP flood with large datagrams (default 1400-byte payload)103.209.129.0/24UDP/RANDOM1mSweden
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.