Liso ยท Observed attack

AS16509 UDP flood on 54.115.17.48 | 2026-11-06 04:07:03Z

ยท Event #65422

WhatsApp

Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.

What this method does

Sends randomized UDP payloads of 1โ€“22 bytes.

All Small randomized UDP observations
Observed
2026-11-06T04:07:03.876Z
Recorded

Recorded 391ms after observation

Affected network
54.115.17.48/32
Network operator
Amazon.com, Inc.AS16509
Method
Small randomized UDPVector 3
Protocol
udp
Destination port
7792

Destination port supplied in the command.

Commanded duration
1m
Observed via
172.233.1.1396.62.250.237

All controllers with retained sightings of this order. Older records may have incomplete source coverage.

Geolocation data
ipinfo-lite ยท 2026-11

Snapshot taken at ingestion; it is never re-resolved later.

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.