SERVICER · Observed attack
AS49581 UDP flood on 5.253.246.12 | 2026-10-07 20:37:35Z
· Event #8
Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.
What this method does
Sends repeated UDP datagrams containing 1–1,400 random ASCII hexadecimal characters from 0123456789ABCDEF. No additional application protocol is constructed.
All UDP random hexadecimal text observations- Observed
- 2026-10-07T20:37:35.900Z
- Recorded
- Affected network
- 5.253.246.12/32
- Network operator
- Ferdinand Zink trading as Tube-HostingAS49581
- Location
- Germany
- Method
- UDP random hexadecimal textVector 7
- Protocol
- udp
- Destination port
- 30120
- Commanded duration
- 2m
- Observed via
- 45.131.64.158
- Geolocation data
- ipinfo-lite · 2026-09
Recorded 1744m 52s after observation
All controllers with retained sightings of this order. Older records may have incomplete source coverage.
Snapshot taken at ingestion; it is never re-resolved later.
Other attacks on this network
Within 24 hours of this observation
Other attacks in this country
Within 24 hours of this observation
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.