Liso ยท Observed attack

AS397032 UDP flood on 163.227.178.197 | 2026-11-06 10:34:34Z

ยท Event #68907

WhatsApp

Country-level precision. botnet.cl stores the target country, never a city or coordinates, so the marker sits at the country's center.

What this method does

Sends randomized UDP payloads of 1โ€“22 bytes.

All Small randomized UDP observations
Observed
2026-11-06T10:34:34.170Z
Recorded

Recorded 603ms after observation

Affected network
163.227.178.197/32
Network operator
SPARKED HOST LLCAS397032
Method
Small randomized UDPVector 3
Protocol
udp
Destination port
27017

Destination port supplied in the command.

Commanded duration
30s
Observed via
172.233.1.1396.62.250.237

All controllers with retained sightings of this order. Older records may have incomplete source coverage.

Geolocation data
ipinfo-lite ยท 2026-11

Snapshot taken at ingestion; it is never re-resolved later.

Other attacks on this network

Within 24 hours of this observation

No other observations within 24 hours.

Other attacks in this country

Within 24 hours of this observation

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.