#eleven11bot — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #eleven11bot, aggregated by home.social.
-
Between February and August, the #Eleven11 was on the news. Using the parallel #DNS root #OpenNIC was nothing new for a botnet. Yet, this botnet was the first known botnet of it's size using the OpenNIC system.
We summarized insights in a new blog post: 161 Days of Eleven11
-
Between February and August, the #Eleven11 was on the news. Using the parallel #DNS root #OpenNIC was nothing new for a botnet. Yet, this botnet was the first known botnet of it's size using the OpenNIC system.
We summarized insights in a new blog post: 161 Days of Eleven11
-
Ausfälle von #X: Störungen gehen auf #DDoS-Angriff auf ungeschützte Server zurück | heise online https://www.heise.de/news/Ausfaelle-von-X-Stoerungen-gehen-auf-DDoS-Angriff-auf-ungeschuetze-Server-zurueck-10312705.html #Botnet #Eleven11bot #Twitter #SocialMedia
-
Ausfälle von #X: Störungen gehen auf #DDoS-Angriff auf ungeschützte Server zurück | heise online https://www.heise.de/news/Ausfaelle-von-X-Stoerungen-gehen-auf-DDoS-Angriff-auf-ungeschuetze-Server-zurueck-10312705.html #Botnet #Eleven11bot #Twitter #SocialMedia
-
About this X DDoS campaign: I've seen reports of attribution to Ukraine, and at least based on attack data at network level — I just don't see it. (And I should note: attribution is hard, so I am generally skeptical.)
Top contributors are 🇺🇸🇲🇽🇪🇸🇮🇹🇧🇷, and as with most botnets: very geographically distributed.
Most of the source IPs intersect with #Eleven11bot as we started seeing them on 26 February.
OK, now back to regularly scheduled skiing.
-
About this X DDoS campaign: I've seen reports of attribution to Ukraine, and at least based on attack data at network level — I just don't see it. (And I should note: attribution is hard, so I am generally skeptical.)
Top contributors are 🇺🇸🇲🇽🇪🇸🇮🇹🇧🇷, and as with most botnets: very geographically distributed.
Most of the source IPs intersect with #Eleven11bot as we started seeing them on 26 February.
OK, now back to regularly scheduled skiing.
-
Eleven11bot: Plötzlich tritt ein neues Botnetz mit Mega-DDoS in Aktion
https://winfuture.de/news,149387.html #Cybercrime #Botnetz #Eleven11bot -
Eleven11bot: Plötzlich tritt ein neues Botnetz mit Mega-DDoS in Aktion
https://winfuture.de/news,149387.html #Cybercrime #Botnetz #Eleven11bot -
A Brand New #Botnet Is Delivering Record-Size #DDoS Attacks
#Eleven11bot infects #webcams and video recorders, with a large concentration in the US.
#securityhttps://www.wired.com/story/eleven11bot-botnet-record-size-ddos-attacks/
-
A Brand New #Botnet Is Delivering Record-Size #DDoS Attacks
#Eleven11bot infects #webcams and video recorders, with a large concentration in the US.
#securityhttps://www.wired.com/story/eleven11bot-botnet-record-size-ddos-attacks/
-
A new botnet dubbed "Eleven11bot" has emerged, delivering what security researchers believe are the largest distributed denial-of-service (DDoS) attacks ever recorded.
https://www.computing.co.uk/news/2025/security/new-botnet-unleashes-record-breaking-ddos-attacks
#ddos #cybersecurity #infosec #technews #botnet #eleven11bot
-
A new botnet dubbed "Eleven11bot" has emerged, delivering what security researchers believe are the largest distributed denial-of-service (DDoS) attacks ever recorded.
https://www.computing.co.uk/news/2025/security/new-botnet-unleashes-record-breaking-ddos-attacks
#ddos #cybersecurity #infosec #technews #botnet #eleven11bot
-
New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices – Source: www.securityweek.com https://ciso2ciso.com/new-eleven11bot-ddos-botnet-powered-by-80000-hacked-devices-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #Eleven11bot #IoTSecurity #botnet #IoT
-
New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices – Source: www.securityweek.com https://ciso2ciso.com/new-eleven11bot-ddos-botnet-powered-by-80000-hacked-devices-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #Eleven11bot #IoTSecurity #botnet #IoT
-
New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices https://www.securityweek.com/new-eleven11bot-ddos-botnet-powered-by-80000-hacked-devices/ #Malware&Threats #IoTSecurity #Eleven11bot #botnet #IoT
-
New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices https://www.securityweek.com/new-eleven11bot-ddos-botnet-powered-by-80000-hacked-devices/ #Malware&Threats #IoTSecurity #Eleven11bot #botnet #IoT
-
New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices https://www.securityweek.com/new-eleven11bot-ddos-botnet-powered-by-80000-hacked-devices/ #Malware&Threats #IoTSecurity #Eleven11bot #botnet #IoT
-
New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices https://www.securityweek.com/new-eleven11bot-ddos-botnet-powered-by-80000-hacked-devices/ #Malware&Threats #IoTSecurity #Eleven11bot #botnet #IoT
-
We'd like to really thank the folks over at @greynoise and @censys for providing additional insights and context: https://www.greynoise.io/blog/new-ddos-botnet-discovered
-
In scenarios involving maximum bot activation, #Eleven11bot is capable of launching volumetric DDoS attacks exceeding several hundred million packets per second across certain vectors. Most observed attacks, however, involve fewer devices—typically between 3,000 and 5,000 bots—but still represent a substantial threat to network reliability and service continuity.
-
Bots associated with this botnet can typically be recognized by distinctive hexadecimal banners featuring strings such as `head[...]1111` or `head[...]11111111`, predominantly appearing on TCP port 17000.
Since its initial detection, our ERT has closely monitored the activities and growth of #Eleven11bot . Early assessments indicate a large and geographically distributed botnet presence, spanning multiple countries such as the United States, Canada, Israel, Spain, the United Kingdom, Brazil, Taiwan, Romania, and Japan, among others.
-
On 26 February 2025, the Nokia Deepfield Emergency Response Team (ERT) identified a significant new DDoS botnet, now tracked under #Eleven11bot
Primarily composed of compromised webcams and Network Video Recorders (NVRs), this botnet has rapidly grown to exceed 30,000 devices. Its size is exceptional among non-state actor botnets, making it one of the largest known DDoS botnet campaigns observed since the invasion of Ukraine in February 2022.
Eleven11bot has targeted diverse sectors, including communications service providers and gaming hosting infrastructure, leveraging a variety of attack vectors. Attack intensity has varied widely, ranging from a few hundred thousand to several hundred million packets per second (pps). Public forums report sustained attack campaigns causing service degradation lasting multiple days, some of which remain ongoing.
-
On 26 February 2025, the Nokia Deepfield Emergency Response Team (ERT) identified a significant new DDoS botnet, now tracked under #Eleven11bot
Primarily composed of compromised webcams and Network Video Recorders (NVRs), this botnet has rapidly grown to exceed 30,000 devices. Its size is exceptional among non-state actor botnets, making it one of the largest known DDoS botnet campaigns observed since the invasion of Ukraine in February 2022.
Eleven11bot has targeted diverse sectors, including communications service providers and gaming hosting infrastructure, leveraging a variety of attack vectors. Attack intensity has varied widely, ranging from a few hundred thousand to several hundred million packets per second (pps). Public forums report sustained attack campaigns causing service degradation lasting multiple days, some of which remain ongoing.