Cereal2 · Country
Attacks observed in China
Cereal2 attack observations affecting networks in China: targeted prefixes, affected operators, attack methods, and timing over the last 30 days.
3000+ observations · Last 30 days · Latest observation
Most affected networks
- Hangzhou Alibaba Advertising Co.,Ltd.AS379631564
- Hubei Feixun Network Co., LtdAS146817704
- CHINATELECOM JiangSu YangZhou IDC networkAS137697362
- NINGBO, ZHEJIANG Province, P.R.China.AS13618869
- WENZHOU, ZHEJIANG Province, P.R.China.AS13477155
- CHINANET BACKBONEAS413429
- Shenzhen Tencent Computer Systems Company LimitedAS4509020
- Shandong eshinton Network Technology Co., Ltd.AS13918019
Last 30 days
Most observed methods
- Stateful TCP connection and session flood2105
- Raw IPv4/TCP packet flood variant 2563
- UDP flood with large datagrams (default 1400-byte payload)173
- UDP flood with minimal datagrams (default 1-byte payload)87
- TCP connection and session-pool flood variant 135
- Nonblocking TCP connection and session-pool flood19
- Raw IPv4/TCP packet flood variant 311
- Small randomized UDP datagram flood3
Last 30 days
Shares are counted over the 3000 most recent observations, not the full 30 days.
Recent observations
- UDP flood with large datagrams (default 1400-byte payload)211.154.31.122/32UDP/801mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.53/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.86/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.80/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.88/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.66/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.27/32TCP/559011mChina
- UDP flood with large datagrams (default 1400-byte payload)162.14.3.250/32UDP/801mChina
- Raw IPv4/TCP packet flood variant 2121.199.29.222/32TCP/801mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.86/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.87/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.89/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.86/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.90/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.89/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.87/32TCP/559011mChina
- UDP flood with large datagrams (default 1400-byte payload)114.117.130.2/32UDP/801mChina
- Stateful TCP connection and session flood8.148.155.42/32TCP/405561mChina
- Stateful TCP connection and session flood8.134.165.102/32TCP/405561mChina
- Stateful TCP connection and session flood192.140.167.154/32TCP/405561mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.88/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.80/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.66/32TCP/559011mChina
- Stateful TCP connection and session flood8.148.243.101/32TCP/403741mChina
- Stateful TCP connection and session flood192.140.167.240/32TCP/403741mChina
- Stateful TCP connection and session flood8.134.218.79/32TCP/403741mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.27/32TCP/559011mChina
- UDP flood with large datagrams (default 1400-byte payload)180.97.183.66/32UDP/559011mChina
- UDP flood with large datagrams (default 1400-byte payload)180.97.183.27/32UDP/559011mChina
- UDP flood with large datagrams (default 1400-byte payload)180.97.183.88/32UDP/559011mChina
- UDP flood with large datagrams (default 1400-byte payload)180.97.183.80/32UDP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.66/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.27/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.88/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.80/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.86/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.53/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.27/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.80/32TCP/559011mChina
- Raw IPv4/TCP packet flood variant 2180.97.183.88/32TCP/559011mChina
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.