Kittenbotv18 · Vector 5

Kittenbotv18: TCP payload flood

Opens ordinary TCP connections and sends payload bytes, with optional connection reuse, receive waits and TLS wrapping. It is not a raw SYN-only method.

533 observations · Last 30 days · Latest observation 2026-10-10 16:43:54 UTC

Most affected countries

Russia414
India35
United States30
Israel12
Germany10
United Kingdom5
Netherlands4
France3

Most affected networks

PJSC RostelecomAS12389296
Open Joint Stock Company Commercial Bank "Modulbank"AS4972981
Joint-Stock Commercial Bank Ak Bars (OJSC)AS20175732
VyomCloudAS15431713
CLOUD LEASE LtdAS20644611
Cloudflare, Inc.AS1333510
Infraly, LLCAS4005296
OVH SASAS162765

Recent observations

2026-10-10 16:43:54 UTCTCP payload flood103.212.136.237/32TCP/256791mIndia
2026-10-10 16:11:16 UTCTCP payload flood185.230.55.113/32TCP/3012030sSpain
2026-10-10 16:07:07 UTCTCP payload flood185.25.207.216/32TCP/255651mItaly
2026-10-10 15:04:59 UTCTCP payload flood181.215.60.0/24TCP/221mCzechia
2026-10-10 14:53:41 UTCTCP payload flood128.116.13.34/32TCP/6063330sFrance
2026-10-10 14:37:30 UTCTCP payload flood91.212.121.34/32TCP/389251mGermany
2026-10-10 08:36:31 UTCTCP payload flood31.56.19.111/32TCP/71931440mUnited Kingdom
2026-10-10 08:36:31 UTCTCP payload flood89.32.41.111/32TCP/71931440mRomania
2026-10-10 08:18:12 UTCTCP payload flood31.56.19.111/32TCP/71931440mUnited Kingdom
2026-10-10 08:16:42 UTCTCP payload flood31.56.19.111/32TCP/719340sUnited Kingdom
2026-10-09 16:47:00 UTCTCP payload flood185.234.75.250/32TCP/301201mNetherlands
2026-10-09 16:37:58 UTCTCP payload flood20.244.48.99/32TCP/3002550sIndia
2026-10-09 16:30:55 UTCTCP payload flood172.65.249.33/32TCP/255651mUnited States
2026-10-09 16:29:48 UTCTCP payload flood172.65.249.33/32TCP/255651mUnited States
2026-10-09 16:25:46 UTCTCP payload flood172.65.246.28/32TCP/222221mUnited States
2026-10-09 15:11:25 UTCTCP payload flood172.65.249.33/32TCP/255651mUnited States
2026-10-09 15:04:14 UTCTCP payload flood172.65.249.33/32TCP/255651mUnited States
2026-10-09 14:29:43 UTCTCP payload flood185.148.3.10/32TCP/4432mFinland
2026-10-09 13:30:35 UTCTCP payload flood103.212.136.191/32TCP/280161mIndia
2026-10-09 13:18:58 UTCTCP payload flood166.117.144.41/32TCP/85401mUnited States
2026-10-09 12:46:29 UTCTCP payload flood45.150.130.224/32TCP/192911mThailand
2026-10-09 09:59:40 UTCTCP payload flood213.139.78.0/24TCP/301201mIsrael
2026-10-09 09:16:09 UTCTCP payload flood185.59.30.205/32TCP/2230sTürkiye
2026-10-09 08:23:56 UTCTCP payload flood185.59.30.205/32TCP/2230sTürkiye
2026-10-09 07:36:55 UTCTCP payload flood198.13.252.57/32TCP/221mUnited States
2026-10-09 07:24:10 UTCTCP payload flood50.114.4.227/32TCP/255651mCanada
2026-10-09 07:20:40 UTCTCP payload flood208.92.235.64/32TCP/33062mUnited States
2026-10-09 07:09:07 UTCTCP payload flood208.92.235.64/32TCP/255651mUnited States
2026-10-09 07:00:28 UTCTCP payload flood161.35.24.121/32TCP/4431mGermany
2026-10-09 06:53:34 UTCTCP payload flood161.35.24.121/32TCP/4431mGermany
2026-10-09 06:52:15 UTCTCP payload flood161.35.24.121/32TCP/4431mGermany
2026-10-09 06:50:55 UTCTCP payload flood161.35.24.121/32TCP/4431mGermany
2026-10-09 04:31:24 UTCTCP payload flood160.191.11.1/32TCP/20001mIndia
2026-10-09 04:30:22 UTCTCP payload flood160.191.11.1/32TCP/20001mIndia
2026-10-09 04:29:20 UTCTCP payload flood160.191.11.1/32TCP/20001mIndia
2026-10-09 04:16:40 UTCTCP payload flood162.4.147.1/32TCP/2230sIndia
2026-10-09 03:53:10 UTCTCP payload flood40.90.8.51/32TCP/4432mUnited States
2026-10-09 01:11:02 UTCTCP payload flood103.18.82.62/32TCP/2230sBangladesh
2026-10-08 22:04:58 UTCTCP payload flood181.214.214.238/32TCP/301201mIsrael
2026-10-08 21:40:23 UTCTCP payload flood185.137.77.0/24TCP/4435mRussia

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.