All families · Network

Attacks observed on Hangzhou Alibaba Advertising Co.,Ltd. (AS37963)

All families attack observations affecting AS37963 Hangzhou Alibaba Advertising Co.,Ltd.: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.

1704 observations · Last 30 days · Latest observation 2026-09-30 06:38:09 UTC

Most affected countries

China1704

Most observed methods

Cereal2: Stateful TCP connection and session flood1468
Cereal2: UDP flood with large datagrams (default 1400-byte payload)155
Cereal2: Raw IPv4/TCP packet flood variant 233
Potassium: UDP datagram flood, variant 728
Cereal2: UDP flood with minimal datagrams (default 1-byte payload)17
Cereal2: Raw IPv4/TCP packet flood variant 32
Cereal2: TCP connection and session-pool flood variant 11

Recent observations

2026-09-30 06:38:09 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 06:38:09 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 06:24:04 UTCCereal2: Stateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 06:24:04 UTCCereal2: Stateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 04:17:13 UTCCereal2: Raw IPv4/TCP packet flood variant 2121.199.29.222/32TCP/801mChina
2026-09-30 04:10:53 UTCCereal2: UDP flood with large datagrams (default 1400-byte payload)101.37.157.42/32UDP/801mChina
2026-09-30 03:34:28 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 03:34:28 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 03:14:10 UTCCereal2: Stateful TCP connection and session flood8.153.12.23/32TCP/339261mChina
2026-09-30 03:11:06 UTCCereal2: Stateful TCP connection and session flood8.138.152.136/32TCP/409701mChina
2026-09-30 03:11:06 UTCCereal2: Stateful TCP connection and session flood8.134.71.73/32TCP/409701mChina
2026-09-30 03:09:03 UTCCereal2: Stateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 03:09:03 UTCCereal2: Stateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 03:07:01 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 03:07:01 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 03:02:57 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 03:02:57 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 02:55:56 UTCCereal2: Stateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 02:55:56 UTCCereal2: Stateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 02:52:55 UTCCereal2: Stateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 02:52:55 UTCCereal2: Stateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 01:49:44 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 01:49:44 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 01:18:03 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 01:18:03 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 23:58:53 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 23:58:53 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 23:16:07 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 23:16:07 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 23:06:37 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 23:06:37 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 22:52:22 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 22:52:22 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 21:39:32 UTCCereal2: Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 21:39:32 UTCCereal2: Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 21:30:01 UTCCereal2: Stateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-29 21:30:01 UTCCereal2: Stateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-29 21:11:31 UTCCereal2: Stateful TCP connection and session flood8.134.71.73/32TCP/409701mChina
2026-09-29 21:11:31 UTCCereal2: Stateful TCP connection and session flood8.138.152.136/32TCP/409701mChina
2026-09-29 21:09:03 UTCCereal2: Stateful TCP connection and session flood8.134.71.73/32TCP/409701mChina

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.