Cereal2 · Network

Attacks observed on Hubei Feixun Network Co., Ltd (AS146817)

Cereal2 attack observations affecting AS146817 Hubei Feixun Network Co., Ltd: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.

835 observations · Last 30 days · Latest observation 2026-09-30 07:54:10 UTC

Most affected countries

China835

Most observed methods

Stateful TCP connection and session flood629
UDP flood with large datagrams (default 1400-byte payload)76
Raw IPv4/TCP packet flood variant 270
UDP flood with minimal datagrams (default 1-byte payload)29
TCP connection and session-pool flood variant 126
Nonblocking TCP connection and session-pool flood5

Recent observations

2026-09-30 07:54:10 UTCUDP flood with large datagrams (default 1400-byte payload)211.154.31.122/32UDP/801mChina
2026-09-30 07:08:15 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-30 07:00:20 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-30 06:38:09 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-30 06:24:04 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-30 03:34:28 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-30 03:11:06 UTCStateful TCP connection and session flood192.140.167.154/32TCP/409701mChina
2026-09-30 03:09:03 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-30 03:07:01 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-30 03:02:57 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-30 02:55:56 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-30 02:52:55 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-30 01:49:44 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-30 01:18:03 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 23:58:53 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 23:16:07 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 23:06:37 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 22:52:22 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 21:39:32 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 21:30:01 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-29 21:11:31 UTCStateful TCP connection and session flood192.140.167.154/32TCP/409701mChina
2026-09-29 21:09:03 UTCStateful TCP connection and session flood192.140.167.154/32TCP/409701mChina
2026-09-29 20:35:25 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 20:10:05 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 20:03:46 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-29 19:59:00 UTCStateful TCP connection and session flood192.140.167.154/32TCP/409701mChina
2026-09-29 19:54:00 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-29 19:51:51 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 19:47:45 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-29 19:42:59 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 19:25:01 UTCStateful TCP connection and session flood192.140.167.154/32TCP/409701mChina
2026-09-29 19:22:52 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-29 19:13:58 UTCStateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
2026-09-29 17:48:10 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-29 17:35:31 UTCRaw IPv4/TCP packet flood variant 2211.154.31.122/32TCP/801mChina
2026-09-29 17:27:35 UTCRaw IPv4/TCP packet flood variant 2211.154.31.122/32TCP/801mChina
2026-09-29 17:19:41 UTCRaw IPv4/TCP packet flood variant 2211.154.31.122/32TCP/801mChina
2026-09-29 17:14:56 UTCRaw IPv4/TCP packet flood variant 2211.154.31.122/32TCP/801mChina
2026-09-29 17:11:46 UTCStateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
2026-09-29 17:07:00 UTCRaw IPv4/TCP packet flood variant 2211.154.31.122/32TCP/801mChina

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.