Cereal2 ยท Observed attack

AS135918 TCP flood on 160.250.134.125 | 2026-10-20 15:19:16Z

ยท Event #343673

WhatsApp

Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.

What this method does

Cereal2 vector 4: Raw IPv4/TCP packet flood variant 2.

All Raw IPv4/TCP packet flood variant 2 observations
Observed
2026-10-20T15:19:16.020Z
Recorded

Recorded 10s after observation

Affected network
160.250.134.125/32
Method
Raw IPv4/TCP packet flood variant 2Vector 4
Protocol
tcp
Destination port
3917
Commanded duration
1m
Observed via
119.45.12.154152.42.212.170157.230.241.185157.245.241.230170.106.35.197174.138.41.23178.128.8.2243.136.129.13143.156.101.22843.159.46.15543.173.37.5377.232.43.2182.157.209.41

All controllers with retained sightings of this order. Older records may have incomplete source coverage.

Geolocation data
ipinfo-lite ยท 2026-09

Snapshot taken at ingestion; it is never re-resolved later.

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.