Potassium ยท Observed attack

AS216102 TCP/UDP flood on 143.20.99.98 | 2026-11-04 08:38:15Z

ยท Event #165182

WhatsApp

Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.

What this method does

Potassium vector 13 sends UDP payloads. The 8oct1 build also constructs HTTP requests over TCP for game-service information and client-service endpoints; the discovery profile retains build provenance.

All UDP and game-service HTTP flood observations
Observed
2026-11-04T08:38:15.956Z
Recorded

Recorded 156ms after observation

Affected network
143.20.99.98/32
Network operator
XeroGroup LLCAS216102
Method
UDP and game-service HTTP floodVector 13
Protocol
tcp/udp
Destination port
3389
Commanded duration
1m
Observed via
31.56.19.149

All controllers with retained sightings of this order. Older records may have incomplete source coverage.

Geolocation data
ipinfo-lite ยท 2026-09

Snapshot taken at ingestion; it is never re-resolved later.

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.