SERVICER · Vector 18

SERVICER: HTTP GET/POST keep-alive

Sends repeated cleartext HTTP/1.1 GET or POST requests over TCP with Host, User-Agent and keep-alive headers. HTTPS URLs or a nonzero secure option return without traffic; no TLS client is implemented.

6 observations · Last 30 days · Latest observation 2026-10-20 07:35:48 UTC

Most affected countries

United States6

Most affected networks

Cloudflare, Inc.AS133356

Recent observations

2026-10-20 07:35:48 UTCHTTP GET/POST keep-alive104.21.192.15/32HTTP/8010sUnited States
2026-10-18 11:04:42 UTCHTTP GET/POST keep-alive104.21.192.15/32HTTP/8030sUnited States
2026-10-16 16:03:57 UTCHTTP GET/POST keep-alive172.66.165.253/32HTTP/802mUnited States
2026-10-16 13:02:13 UTCHTTP GET/POST keep-alive172.66.165.253/32HTTP/802mUnited States
2026-10-09 14:05:10 UTCHTTP GET/POST keep-alive104.21.192.15/32HTTP/8030sUnited States
2026-10-09 14:02:22 UTCHTTP GET/POST keep-alive104.21.192.15/32HTTP/8030sUnited States

botnet.cl reports infrastructure it observed. An address appearing here identifies a target or a relay, not a person responsible for the attack.