Stéphane Bortzmeyer on Nostr: Protecting the network from dDoS example of the Eleven11bot (86,000 IoT devices, ...
Protecting the network from dDoS example of the Eleven11bot (86,000 IoT devices, mostly smart TVs and videosurveillance cameras):
Most packets are TCP-ACK (DNS is far behind, most attacks are direct, not reflection)
The speaker's email address use a .brand TLD, which is not common :
https://mastodon.gougere.fr/@bortzmeyer/114188256202646933#Netnod
Published at
2025-03-19 09:04:22Event JSON
{
"id": "23cfcb72b76d420da19c4cf9fea4218ce4124c2e2ef3bcd1bb22887bc49383d7",
"pubkey": "81e31d02b3d0b97ae960104572e2d79bf26e647a4d82afef56ce2395055364ff",
"created_at": 1742375062,
"kind": 1,
"tags": [
[
"e",
"6b6b34471555c435e487c3c7dc940605cb90cd64cef561a21280a26458954a7f",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"netnod"
],
[
"proxy",
"https://mastodon.gougere.fr/users/bortzmeyer/statuses/114188292087081604",
"activitypub"
]
],
"content": "Protecting the network from dDoS example of the Eleven11bot (86,000 IoT devices, mostly smart TVs and videosurveillance cameras): \n\nMost packets are TCP-ACK (DNS is far behind, most attacks are direct, not reflection)\n\nThe speaker's email address use a .brand TLD, which is not common : \nhttps://mastodon.gougere.fr/@bortzmeyer/114188256202646933\n\n#Netnod",
"sig": "227cba072514689ea35fabfefcde0df00567bccdc43f73fa8d7d64617992705ae68b9198ebd9a7db6bc692e2f21ee2f3464f704420ed77b82664eb15c9b72868"
}