Potassium ยท Observed attack

Mixed TCP/UDP flood on CHINANET BACKBONE in China

ยท Event #6646

WhatsApp

Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.

What this method does

Potassium vector 18 contains TCP stream, raw TCP, and UDP datagram branches. It is a mixed-transport handler with destination-port selection through option 7.

All Mixed TCP/UDP flood observations
Observed
2026-09-28T11:30:44.316Z
Recorded

Recorded 133ms after observation

Affected network
121.11.204.26/32
Network operator
CHINANET BACKBONEAS4134
Method
Mixed TCP/UDP floodVector 18
Protocol
tcp/udp
Destination port
80
Commanded duration
1m
Observed via
5.181.2.159

All controllers with retained sightings of this order. Older records may have incomplete source coverage.

Geolocation data
ipinfo-lite ยท 2026-09

Snapshot taken at ingestion; it is never re-resolved later.

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.