Liso ยท Observed attack

AS14586 TCP flood on 74.91.113.229 | 2026-11-06 17:53:48Z

ยท Event #72513

WhatsApp

Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.

What this method does

Holds a configurable TCP connection pool and sends one-byte newlines periodically, every 15 seconds by default.

All TCP session holding observations
Observed
2026-11-06T17:53:48.911Z
Recorded

Recorded 2s after observation

Affected network
74.91.113.229/32
Network operator
Nuclearfallout Enterprises, Inc.AS14586
Method
TCP session holdingVector 8
Protocol
tcp
Destination port
80

Destination port supplied in the command.

Commanded duration
1m
Observed via
109.110.170.72172.233.1.1396.62.250.14696.62.250.23496.62.250.23596.62.250.23796.62.250.238

All controllers with retained sightings of this order. Older records may have incomplete source coverage.

Geolocation data
ipinfo-lite ยท 2026-11

Snapshot taken at ingestion; it is never re-resolved later.

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.