New DDoS Botnet Discovered: Over 30,000 Hacked Devices, Majority of Observed Activity Traced to Iran A newly discovered global cyber threat is rapidly expanding, infecting tens of thousands of internet-connected devices to launch powerful cyberattacks.

We'd like to really thank the folks over at @greynoise.io and @censys.bsky.social for providing additional insights and context: www.greynoise.io/blog/new-ddo...

Since its initial detection, our ERT has closely monitored the activities and growth of #Eleven11bot . Early assessments indicate a large and geographically distributed botnet presence, spanning 🇺🇸🇨🇦🇮🇱🇪🇸🇬🇧🇹🇼🇷🇴🇯🇵, among others.

From the Palworld community on Reddit Explore this post and more from the Palworld community

Public forums report sustained attack campaigns causing service degradation lasting multiple days, some of which remain ongoing: www.reddit.com/r/Palworld/c...

#Eleven11bot has targeted diverse sectors, including communications service providers and gaming hosting infrastructure. Attack intensity has varied widely, ranging from a few hundred thousand to several hundred million packets per second (pps).

On 26 February 2025, the Nokia Deepfield Emergency Response Team (ERT) identified a significant new DDoS botnet, now tracked under #Eleven11bot

This botnet has rapidly grown to exceed 30,000 devices. Its size makes it one of the largest known DDoS botnets.