On March 11, according to the analysis of Qi Anxin Xlab laboratory, the large-scale network attack that caused the X platform to be paralyzed three times was the same main botnet that attacked DeepSeek during the Spring Festival. The network was called the Mirai variant botnet RapperBot, which belonged to the "professional thug" attack group. The Xlab lab found that the attack time perfectly coincided with the downtime of the X platform, mainly concentrated in the 10:00 pm Beijing time on March 10 to 2:00 am Beijing time on March 11. The botnet is active all year round, attacking an average of hundreds of targets every day, with thousands of instructions during peak periods, and the attack targets are distributed in Brazil, Belarus, Russia, China, Sweden and other regions. The scale and intensity of the attack directly led to the X platform suffering three significant service outages on March 10 EST, with a peak of 20,538 users reporting failures.