Cereal2 · Network

Attacks observed on Hangzhou Alibaba Advertising Co.,Ltd. (AS37963)

Cereal2 attack observations affecting AS37963 Hangzhou Alibaba Advertising Co.,Ltd.: targeted prefixes, attack methods, destination ports, and timing over the last 30 days.

1681 observations · Last 30 days · Latest observation 2026-09-30 07:32:00 UTC

Most affected countries

China1681

Most observed methods

Stateful TCP connection and session flood1472
UDP flood with large datagrams (default 1400-byte payload)155
Raw IPv4/TCP packet flood variant 234
UDP flood with minimal datagrams (default 1-byte payload)17
Raw IPv4/TCP packet flood variant 32
TCP connection and session-pool flood variant 11

Recent observations

2026-09-30 07:32:00 UTCRaw IPv4/TCP packet flood variant 2121.199.29.222/32TCP/801mChina
2026-09-30 07:08:15 UTCStateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 07:08:15 UTCStateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 07:00:20 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 07:00:20 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 06:38:09 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 06:38:09 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 06:24:04 UTCStateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 06:24:04 UTCStateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 04:17:13 UTCRaw IPv4/TCP packet flood variant 2121.199.29.222/32TCP/801mChina
2026-09-30 04:10:53 UTCUDP flood with large datagrams (default 1400-byte payload)101.37.157.42/32UDP/801mChina
2026-09-30 03:34:28 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 03:34:28 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 03:14:10 UTCStateful TCP connection and session flood8.153.12.23/32TCP/339261mChina
2026-09-30 03:11:06 UTCStateful TCP connection and session flood8.138.152.136/32TCP/409701mChina
2026-09-30 03:11:06 UTCStateful TCP connection and session flood8.134.71.73/32TCP/409701mChina
2026-09-30 03:09:03 UTCStateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 03:09:03 UTCStateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 03:07:01 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 03:07:01 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 03:02:57 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 03:02:57 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 02:55:56 UTCStateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 02:55:56 UTCStateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 02:52:55 UTCStateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
2026-09-30 02:52:55 UTCStateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
2026-09-30 01:49:44 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-30 01:49:44 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 01:18:03 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-30 01:18:03 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 23:58:53 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 23:58:53 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 23:16:07 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 23:16:07 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 23:06:37 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 23:06:37 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 22:52:22 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 22:52:22 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
2026-09-29 21:39:32 UTCStateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
2026-09-29 21:39:32 UTCStateful TCP connection and session flood8.148.243.101/32TCP/403741mChina

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.