Potassium · Observed attack
AS61254 TCP/UDP flood on 37.49.224.108 | 2026-10-17 13:15:33Z
· Event #66937
Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.
What this method does
Potassium vector 13 sends UDP payloads. The 8oct1 build also constructs HTTP requests over TCP for game-service information and client-service endpoints; the discovery profile retains build provenance.
All UDP and game-service HTTP flood observations- Observed
- 2026-10-17T13:15:33.493Z
- Recorded
- Affected network
- 37.49.224.108/32
- Network operator
- ESTOXY OUAS61254
- Location
- Netherlands
- Method
- UDP and game-service HTTP floodVector 13
- Protocol
- tcp/udp
- Destination port
- 80
- Commanded duration
- 1m
- Observed via
- 134.199.154.6431.56.19.14131.56.19.7131.56.19.7389.32.41.10989.32.41.59
- Geolocation data
- ipinfo-lite · 2026-09
Recorded 147ms after observation
All controllers with retained sightings of this order. Older records may have incomplete source coverage.
Snapshot taken at ingestion; it is never re-resolved later.
Other attacks on this network
Within 24 hours of this observation
- UDP datagram flood, variant 737.49.224.144/32
- UDP packet or datagram flood37.49.224.144/32
- TCP session and raw-packet flood, variant 837.49.224.144/32
- TCP session and raw-packet flood, variant 837.49.230.4/32
- TCP session and raw-packet flood, variant 837.49.225.117/32
- TCP session and raw-packet flood, variant 837.49.225.8/32
Other attacks in this country
Within 24 hours of this observation
botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.