IoT Invasion: Eleven11bot Hijacks 86,000 Devices for DDoS Chaos!
The Eleven11bot botnet has infected over 86,000 IoT devices, mostly security cameras and NVRs. Researchers say it’s one of the largest non-state actor botnets since 2022. It targets diverse sectors using various attack methods, and most affected devices are in the US and UK.

Hot Take:
The Eleven11bot botnet is like the secret club for IoT devices, but instead of wearing cool leather jackets and playing pool, they’re busy launching DDoS attacks. With over 86,000 IoT devices enrolled, mostly security cameras and NVRs, it’s safe to say that Eleven11bot is the ultimate bouncer, making sure no packet gets left behind.
Key Points:
- Eleven11bot botnet has infected over 86,000 IoT devices, primarily security cameras and NVRs.
- It targets a variety of sectors, including communications service providers and gaming infrastructure.
- GreyNoise found that 61% of the malicious IPs originate from Iran.
- The botnet expands through brute-force attacks, exploiting weak passwords and targeting specific device vulnerabilities.
- Most infected devices are located in the US and the UK.
Already a member? Log in here